CVE-2006-6345: Directory traversal vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and earlier, an...

Security readout for executives and security teams

This CVE affects legacy SAP Internet Graphics Service versions. A remote attacker could use a directory traversal flaw in an HTTP request to delete files outside the intended location. That can disrupt SAP-dependent services if vulnerable IGS components are reachable. The record is old and based on initial disclosure, so operational details are limited. Exposure is most likely in legacy SAP environments still running affected IGS patch levels, especially where the IGS HTTP interface is reachable from untrusted networks. Current systems may be unaffected if upgraded or decommissioned, but inventories should verify this directly. Treat this as a priority legacy-SAP exposure check. The main risk is service disruption or damage from remote file deletion, but evidence is incomplete and no active exploitation is cited in the bundle. Mitigation focus: Check SAP vendor guidance and SAP Notes for supported fixes or workarounds.; Upgrade or retire affected SAP IGS versions where vendor guidance supports it.; Restrict IGS HTTP access to trusted administrative or application networks..

Prepared

Jun 29, 2026, 08:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.