Vladimir-Ivanov-Git/sap_igs_xxe

PoC

SAP IGS XXE attack CVE-2018-2392 and CVE-2018-2393

view exploit source poc_in_githubauthor Vladimir-Ivanov-Gitpublished 2020-10-02catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-2392UShigh7.5Exploit
Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics S…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan