CVE-2021-27620
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method Ups::AddPart() which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP Internet Graphics Service
- Vendor
- SAP SE
- Product
- SAP Internet Graphics Service
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| < 7.20 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 7.20EXT | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 7.53 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 7.20_EX2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 7.81 | affected | Unavailable | Unavailable | Unavailable | None listed |