Approved changes feed: RSS · Atom

cpe:2.3:a:sap:internet_graphics_server:6.40_patch_11:*:*:*:*:*:*:*

part: a version: 6.40_patch_11 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductInternet Graphics Server (b13d2c65-0302-5fcc-988a-e07c46116215)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-3613 vulnerable 2026-06-08 04:49:54.297740 Details available
Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS) allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter.
Published: 2007-07-06T19:00:00.000Z
Updated: 2024-08-07T14:21:36.427Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4134 vulnerable 2026-06-08 04:49:11.024475 Details available
Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 and earlier allows remote attackers to cause a denial of service (service shutdown) via certain HTTP requests. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
Published: 2006-08-14T23:00:00.000Z
Updated: 2024-08-07T18:57:45.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4133 vulnerable 2026-06-08 04:49:11.022747 Details available
Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation.
Published: 2006-08-14T23:00:00.000Z
Updated: 2024-08-07T18:57:45.971Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.