SAP NetWeaver As Internet Graphics Server vulnerabilities

7 CVEs affecting SAP NetWeaver As Internet Graphics Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-27627, published 2021-06-09.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-27627, published 2021-06-09. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a…
• CVE-2021-27626, published 2021-06-09. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a…
• CVE-2021-27625, published 2021-06-09. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a…
• CVE-2021-27624, published 2021-06-09. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a…
• CVE-2021-27622, published 2021-06-09. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a…
• CVE-2021-27620, published 2021-06-09. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a…
• CVE-2021-27623, published 2021-06-09. Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days. SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a…