deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-9970
Published: 2018-02-12
Description: A remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions 1.1.3 and prior. Uploading a zip which contains carefully crafted metadata allows for the file to be uploaded to any directory on the host machine information which could lead to remote code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://www.securityfocus.com/bid/103052; https://ics-cert.us-cert.gov/advisories/ICSA-18-046-04; https://www.schneider-electric.com/en/download/document/SEVD-2018-039-01/
CVE: CVE-2018-6930
Published: 2018-02-13
Description: A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remote attacker to cause a denial of service (application crash) via a maliciously crafted pict file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/ImageMagick/ImageMagick/issues/967; https://github.com/ImageMagick/ImageMagick/issues/967
CVE: CVE-2018-6942
Published: 2018-02-13
Description: An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00054.html; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5736; https://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=29c759284e305ec428703c9a5831d0b1fc3497ef
CVE: CVE-2018-1297
Published: 2018-02-13
Description: When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection. This could allow an attacker to get Access to JMeterEngine and send unauthorized code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-319
References: http://mail-archives.apache.org/mod_mbox/www-announce/201802.mbox/%3CCAH9fUpaNzk5am8oFe07RQ-kynCsQv54yB-uYs9bEnz7tbX-O7g%40mail.gmail.com%3E; https://bz.apache.org/bugzilla/show_bug.cgi?id=62039; https://lists.apache.org/thread.html/31e0adbeca9d865ff74d0906b2248a41a1457cb54c1afbe5947df58b%40%3Cissues.jmeter.apache.org%3E
CVE: CVE-2018-6292
Published: 2018-02-13
Description: Remote Code Execution in Saperion Web Client version 7.5.2 83166.
CVSS Score: 9.8 (CRITICAL)
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/02/09/klcert-18-001-saperion-webclient-multiple-vulnerabilities-remote-code-execution-with-system-user-privileges-in-saperion-web-client/; https://ics-cert.kaspersky.com/alerts/2018/02/12/multiple-vulnerabilities-found-in-popular-document-management-system/; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/02/09/klcert-18-001-saperion-webclient-multiple-vulnerabilities-remote-code-execution-with-system-user-privileges-in-saperion-web-client/
CVE: CVE-2018-6293
Published: 2018-02-13
Description: Arbitrary File Read in Saperion Web Client version 7.5.2 83166.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/02/09/klcert-18-002-saperion-webclient-multiple-vulnerabilities-arbitrary-file-read-in-saperion-web-client/; https://ics-cert.kaspersky.com/alerts/2018/02/12/multiple-vulnerabilities-found-in-popular-document-management-system/; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/02/09/klcert-18-002-saperion-webclient-multiple-vulnerabilities-arbitrary-file-read-in-saperion-web-client/
CVE: CVE-2018-6911
Published: 2018-02-13
Description: The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a single argument (aka the command parameter).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.exploit-db.com/exploits/44031/; https://www.exploit-db.com/exploits/44031/
CVE: CVE-2018-0487
Published: 2018-02-13
Description: ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103056; https://security.gentoo.org/glsa/201804-19; https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01
CVE: CVE-2018-0488
Published: 2018-02-13
Description: ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption) via a crafted application packet within a TLS or DTLS session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103057; https://security.gentoo.org/glsa/201804-19; https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01
CVE: CVE-2018-6928
Published: 2018-02-13
Description: PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/44030/; https://www.exploit-db.com/exploits/44030/
CVE: CVE-2018-6948
Published: 2018-02-13
Description: In CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer overflow, when writing a prefix to the buffer buf. The maximal size of the prefix is CCNL_MAX_PREFIX_SIZE; the buffer has the size CCNL_MAX_PREFIX_SIZE. However, when NFN is enabled, additional characters are written to the buffer (e.g., the "NFN" and "R2C" tags). Therefore, sending an NFN-R2C packet with a prefix of size CCNL_MAX_PREFIX_SIZE can cause an overflow of buf inside ccnl_prefix_to_str_detailed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/cn-uofbasel/ccn-lite/issues/193; https://github.com/cn-uofbasel/ccn-lite/issues/193
CVE: CVE-2015-9252
Published: 2018-02-13
Description: An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: https://github.com/qpdf/qpdf/commit/701b518d5c56a1449825a3a37a716c58e05e1c3e; https://github.com/qpdf/qpdf/issues/51; https://usn.ubuntu.com/3638-1/
CVE: CVE-2016-10713
Published: 2018-02-13
Description: An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly lead to DoS via a crafted input file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103063; https://access.redhat.com/errata/RHSA-2019:2033; https://git.savannah.gnu.org/cgit/patch.git/commit/src/pch.c?id=a0d7fe4589651c64bd16ddaaa634030bb0455866
CVE: CVE-2017-18183
Published: 2018-02-13
Description: An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject() function in libqpdf/QPDFWriter.cc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/qpdf/qpdf/commit/8249a26d69f72b9cda584c14cc3f12769985e481; https://github.com/qpdf/qpdf/issues/143; https://usn.ubuntu.com/3638-1/
CVE: CVE-2017-18184
Published: 2018-02-13
Description: An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in QPDF_encryption.cc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/qpdf/qpdf/commit/dea704f0ab7f625e1e7b3f9a1110b45b63157317; https://github.com/qpdf/qpdf/issues/147; https://usn.ubuntu.com/3638-1/
CVE: CVE-2017-18185
Published: 2018-02-13
Description: An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the Pl_Buffer::write function in Pl_Buffer.cc. It is caused by an integer overflow in the PNG filter.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/qpdf/qpdf/commit/ec7d74a386c0b2f38990079c3b0d2a2b30be0e71; https://github.com/qpdf/qpdf/issues/150; https://usn.ubuntu.com/3638-1/
CVE: CVE-2017-18186
Published: 2018-02-13
Description: An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/qpdf/qpdf/commit/85f05cc57ffa0a863d9d9b23e73acea9410b2937; https://github.com/qpdf/qpdf/issues/149; https://usn.ubuntu.com/3638-1/
CVE: CVE-2018-6951
Published: 2018-02-13
Description: An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/103044; https://git.savannah.gnu.org/cgit/patch.git/commit/?id=f290f48a[PII_REDACTED]84bfff87f8093c15195e6a; https://savannah.gnu.org/bugs/index.php?53132
CVE: CVE-2018-6952
Published: 2018-02-13
Description: A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-415
References: http://www.securityfocus.com/bid/103047; https://access.redhat.com/errata/RHSA-2019:2033; https://savannah.gnu.org/bugs/index.php?53133
CVE: CVE-2017-15709
Published: 2018-02-13
Description: When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: https://lists.apache.org/thread.html/03f91b1fb85686a848cee6b90112cf6059bd1b21b23bacaa11a962e1%40%3Cdev.activemq.apache.org%3E; https://lists.apache.org/thread.html/2b5c0039197a4949f29e1e2c9441ab38d242946b966f61c110808bcc%40%3Ccommits.activemq.apache.org%3E; https://lists.apache.org/thread.html/2b6f04a552c6ec2de6563c2df3bba813f0fe9c7e22cce27b7829db89%40%3Cdev.activemq.apache.org%3E
CVE: CVE-2017-1711
Published: 2018-02-13
Description: IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory. IBM X-Force ID: 134532.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.ibm.com/support/docview.wss?uid=swg22010774; http://www.ibm.com/support/docview.wss?uid=swg22010775; https://exchange.xforce.ibmcloud.com/vulnerabilities/134532
CVE: CVE-2017-1714
Published: 2018-02-13
Description: IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege. IBM X-Force ID: 134633.
CVSS Score: 7.8 (HIGH)
References: http://www.ibm.com/support/docview.wss?uid=swg22010776; http://www.ibm.com/support/docview.wss?uid=swg22010777; https://exchange.xforce.ibmcloud.com/vulnerabilities/134633
CVE: CVE-2017-1720
Published: 2018-02-13
Description: IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared memory IPC. IBM X-Force ID: 134807.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-77
References: http://www.ibm.com/support/docview.wss?uid=swg22010766; http://www.ibm.com/support/docview.wss?uid=swg22010767; https://exchange.xforce.ibmcloud.com/vulnerabilities/134807
CVE: CVE-2018-1383
Published: 2018-02-13
Description: A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one system, to obtain root access on another machine. IBM X-force ID: 138117.
CVSS Score: 9.1 (CRITICAL)
References: http://aix.software.ibm.com/aix/efixes/security/aixbase_advisory.asc; http://www-01.ibm.com/support/docview.wss?uid=isg3T1026948; http://www.securityfocus.com/bid/102989
CVE: CVE-2018-6953
Published: 2018-02-13
Description: In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which has a resultant buffer overflow and out-of-bounds memory accesses.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/cn-uofbasel/ccn-lite/issues/195; https://github.com/cn-uofbasel/ccn-lite/issues/195
CVE: CVE-2018-6954
Published: 2018-02-13
Description: systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html; https://github.com/systemd/systemd/issues/7986; https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE: CVE-2018-5459
Published: 2018-02-13
Description: An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-044-01; https://ics-cert.us-cert.gov/advisories/ICSA-18-044-01
CVE: CVE-2018-6910
Published: 2018-02-13
Description: DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://github.com/kongxin520/DedeCMS/blob/master/DedeCMS_5.7_Bug.md; https://kongxin.gitbook.io/dedecms-5-7-bug/; https://github.com/kongxin520/DedeCMS/blob/master/DedeCMS_5.7_Bug.md
CVE: CVE-2017-15699
Published: 2018-02-13
Description: A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0. To exploit this vulnerability, a remote user must be able to establish an AMQP connection to the Qpid Dispatch Router and send a specifically crafted AMQP frame which will cause it to segfault and shut down.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103067; https://issues.apache.org/jira/browse/DISPATCH-924; http://www.securityfocus.com/bid/103067
CVE: CVE-2018-2364
Published: 2018-02-14
Description: SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103002; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2541700
CVE: CVE-2018-2369
Published: 2018-02-14
Description: Under certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access information which would otherwise be restricted. An attacker can misuse the authentication function of the SAP HANA server on its SQL interface and disclose 8 bytes of the server process memory. The attacker cannot influence or predict the location of the leaked memory.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/102997; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2572940
CVE: CVE-2018-2370
Published: 2018-02-14
Description: Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: http://www.securityfocus.com/bid/102998; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2493727
CVE: CVE-2018-2371
Published: 2018-02-14
Description: The SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not sufficiently encode user controlled inputs, which results in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103005; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2560741
CVE: CVE-2018-2372
Published: 2018-02-14
Description: A plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could endanger confidentiality of SSL communication.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2589129; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2373
Published: 2018-02-14
Description: Under certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to execute SQL statements that deliver information about system configuration in SAP HANA Extended Application Services, 1.0.
CVSS Score: 7.5 (HIGH)
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2589129; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2374
Published: 2018-02-14
Description: In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve sensitive application data like service bindings within that space.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/103018; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2589129
CVE: CVE-2018-2375
Published: 2018-02-14
Description: In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space.
CVSS Score: 8.1 (HIGH)
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2589129; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2376
Published: 2018-02-14
Description: In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space.
CVSS Score: 8.1 (HIGH)
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2589129; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2377
Published: 2018-02-14
Description: In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved by unauthorized users.
CVSS Score: 6.5 (MEDIUM)
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2589129; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2378
Published: 2018-02-14
Description: In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications including resource consumption.
CVSS Score: 6.5 (MEDIUM)
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2589129; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2379
Published: 2018-02-14
Description: In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-209
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2589129; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2381
Published: 2018-02-14
Description: SAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/103010; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2545842
CVE: CVE-2018-2382
Published: 2018-02-14
Description: A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to store graphics in a controlled area and as such gain information from system area, which is not available to the user otherwise.
CVSS Score: 6.5 (MEDIUM)
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2383
Published: 2018-02-14
Description: Reflected cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2384
Published: 2018-02-14
Description: Under certain conditions a malicious user provoking a Null Pointer dereference can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2385
Published: 2018-02-14
Description: Under certain conditions a malicious user provoking a divide by zero crash can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2386
Published: 2018-02-14
Description: Under certain conditions a malicious user provoking an out of bounds buffer overflow can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2387
Published: 2018-02-14
Description: A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to obtain information on ports, which is not available to the user otherwise.
CVSS Score: 6.5 (MEDIUM)
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
CVE: CVE-2018-2388
Published: 2018-02-14
Description: Stored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/; https://launchpad.support.sap.com/#/notes/2525222; https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/