VULNERABILITY INTELLIGENCE

CVE-2018-2389

CVSS score5.7 MEDIUM
EPSS probability0.70%
CISA KEVNot currently listed
Published2018-02-14
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Description

Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, hiding important information in the log file.

Weakness classification

  • CWE-116: Improper Encoding or Escaping of Output

Primary references