CVE-2018-2389: SAP Internet Graphics Server

Medium severity, CVSS 5.7. EPSS: 0.7% chance of exploitation in the next 30 days.

Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, hiding important information in the log file.

Affected products

• SAP Internet Graphics Server: version 7.20 only; version 7.20ext only; version 7.45 only; version 7.49 only; version 7.53 only

Published 2018-02-14. Last modified 2026-06-17.