Description
SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request causing the affected process to read beyond the declared values, resulting in repeated termination of the worker process. This results in a high impact on availability with no impact on integrity or confidentiality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP NetWeaver (Internet Graphics Service) | BC-FES-IGS 7.20EXT, 7.20_EXT2, 7.53, 7.54, 7.81, 9.16 | — |
Advisories 2
- NCSC-2026-0485 Kwetsbaarheden verholpen in SAP-producten NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4420 SAP Patch Day November 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 9, 2026