CVE-2006-6345: sap internet_graphics_server
Vulnerability summary
CVE-2006-6345 is a high (CVSS 7.5) vulnerability in sap internet_graphics_server. EPSS estimates a 1.91% chance of exploitation in the next 30 days, higher than 79.6% of scored vulnerabilities.
Timeline
- 07-12-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Directory traversal vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial disclosure. Details will be updated after the grace period has ended. This issue is different from CVE-2006-4133 and CVE-2006-4134.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.91%
Chance of exploitation in the next 30 days
Percentile
80%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.91% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Sap1 product
- internet_graphics_server≤ 6.40_patch_16 | ≤ 7.00_patch_3
1 vendor · 1 product