Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_internet_graphics_service:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Internet Graphics Service (1d121c6c-e7aa-5b33-936c-c42261ae7b39)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27627 vulnerable 2026-06-08 05:31:21.959447 Details available
MEDIUM (5.9)
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method ChartInterpreter::DoIt() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
Published: 2021-06-09T00:00:00.000Z
Updated: 2024-08-03T21:26:10.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27626 vulnerable 2026-06-08 05:31:21.958566 Details available
MEDIUM (5.9)
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CMiniXMLParser::Parse() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
Published: 2021-06-09T00:00:00.000Z
Updated: 2024-08-03T21:26:10.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27625 vulnerable 2026-06-08 05:31:21.957838 Details available
MEDIUM (5.9)
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method IgsData::freeMemory() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
Published: 2021-06-09T00:00:00.000Z
Updated: 2024-08-03T21:26:10.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27624 vulnerable 2026-06-08 05:31:21.957317 Details available
MEDIUM (5.9)
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CiXMLIStreamRawBuffer::readRaw () which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
Published: 2021-06-09T00:00:00.000Z
Updated: 2024-08-03T21:26:10.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27623 vulnerable 2026-06-08 05:31:21.956549 Details available
MEDIUM (5.9)
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CXmlUtility::CheckLength() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
Published: 2021-06-09T00:00:00.000Z
Updated: 2024-08-03T21:26:10.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27622 vulnerable 2026-06-08 05:31:21.955698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27620 vulnerable 2026-06-08 05:31:21.946777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.