Back

CVE-2005-1691

Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to read arbitrary files via ".." sequences in an HTTP GET request.

Published: Jul 26, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
sap sap_r_3 *

GitHub Security Advisory GHSA-pv43-7jg4-68jh

Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows...

Risk Scores

CVSS Score 5.0 / 10
EPSS Score 1.54%

Top 27% most likely to be exploited

Threat Score 20.5 / 100

Data Sources

NVD EPSS GitHub