CVE-2018-2439
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2018
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has insufficient request validation (for example, where the request is validated for authenticity and validity) and under certain conditions, will process invalid requests. Several areas of the SAP Internet Graphics Server (IGS) did not require sufficient input validation. Namely, the SAP Internet Graphics Server (IGS) HTTP and RFC listener, SAP Internet Graphics Server (IGS) portwatcher when registering a portwatcher to the multiplexer and the SAP Internet Graphics Server (IGS) multiplexer had insufficient input validation and thus allowing a malformed data packet to cause a crash.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP Internet Graphics Server (IGS)
- Vendor
- SAP
- Product
- SAP Internet Graphics Server (IGS)
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| = 7.20 | affected | Unavailable | Unavailable | Unavailable | None listed |
| = 7.20EXT | affected | Unavailable | Unavailable | Unavailable | None listed |
| = 7.45 | affected | Unavailable | Unavailable | Unavailable | None listed |
| = 7.49 | affected | Unavailable | Unavailable | Unavailable | None listed |
| = 7.53 | affected | Unavailable | Unavailable | Unavailable | None listed |