Skip to content
OpenAdvisories
High · 7.5 CVE-2026-109807 EUVD-2026-120689GHSA-vm2r-6vq5-q3fc

Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)

Published Nov 10, 2026 · Updated Nov 10, 2026 · Assigned by sap

Description

SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request causing the affected process to read beyond the declared values, resulting in repeated termination of the worker process. This results in a high impact on availability with no impact on integrity or confidentiality.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver (Internet Graphics Service) BC-FES-IGS 7.20EXT, 7.20_EXT2, 7.53, 7.54, 7.81, 9.16 —

Advisories 2

References