CVE

CVE-2018-2392

7.5

CVSS

Description

Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.

Attack Vector

Privileges Req.

User Interaction

sap internet graphics server

Updated Oct 12, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2018-2392 Scanner

Targets the XML parser endpoint in SAP IGS to read arbitrary files from the server, enabling data exfiltration without authentication.

Used 2.9k times · 3.4k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: sap internet graphics server

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →