Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver_as_internet_graphics_server:7.20ex2:*:*:*:*:*:*:*

part: a version: 7.20ex2 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver As Internet Graphics Server (51ec4c82-52a0-5768-8d85-b60f8e83486c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27627 vulnerable 2026-06-08 05:31:21.959576 Details available
MEDIUM (5.9)
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method ChartInterpreter::DoIt() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
Published: 2021-06-09T00:00:00.000Z
Updated: 2024-08-03T21:26:10.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27626 vulnerable 2026-06-08 05:31:21.958809 Details available
MEDIUM (5.9)
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CMiniXMLParser::Parse() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
Published: 2021-06-09T00:00:00.000Z
Updated: 2024-08-03T21:26:10.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27625 vulnerable 2026-06-08 05:31:21.957981 Details available
MEDIUM (5.9)
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method IgsData::freeMemory() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
Published: 2021-06-09T00:00:00.000Z
Updated: 2024-08-03T21:26:10.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27624 vulnerable 2026-06-08 05:31:21.957367 Details available
MEDIUM (5.9)
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CiXMLIStreamRawBuffer::readRaw () which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
Published: 2021-06-09T00:00:00.000Z
Updated: 2024-08-03T21:26:10.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27623 vulnerable 2026-06-08 05:31:21.956605 Details available
MEDIUM (5.9)
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CXmlUtility::CheckLength() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
Published: 2021-06-09T00:00:00.000Z
Updated: 2024-08-03T21:26:10.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27622 vulnerable 2026-06-08 05:31:21.955963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27620 vulnerable 2026-06-08 05:31:21.948506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.