Vulnerability Details CVE-2018-2389
Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, hiding important information in the log file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 48.7%
CVSS Severity
CVSS v3 Score 5.7
CVSS v2 Score 4.0
References
Products affected by CVE-2018-2389
-
cpe:2.3:a:sap:internet_graphics_server:7.20
-
cpe:2.3:a:sap:internet_graphics_server:7.20ext
-
cpe:2.3:a:sap:internet_graphics_server:7.45
-
cpe:2.3:a:sap:internet_graphics_server:7.49
-
cpe:2.3:a:sap:internet_graphics_server:7.53