8.8
CVE-2018-2395
- EPSS 1.53%
- Veröffentlicht 14.02.2018 12:29:01
- Zuletzt bearbeitet 21.11.2024 04:03:44
- Quelle cna@sap.com
- CVE-Watchlists
- Unerledigt
LoginUnder certain conditions a malicious user may retrieve information on SAP Internet Graphic Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, overwrite existing image or corrupt other type of files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Internet Graphics Server Version7.20
SAP ≫ Internet Graphics Server Version7.20ext
SAP ≫ Internet Graphics Server Version7.45
SAP ≫ Internet Graphics Server Version7.49
SAP ≫ Internet Graphics Server Version7.53
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.53% | 0.714 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
https://launchpad.support.sap.com/#/notes/2525222
http://www.securityfocus.com/bid/103019