What is CVE-2018-2439?

CVE-2018-2439 is a medium-severity vulnerability in Sap Internet_graphics_server, classified under Improper Input Validation. CVSS score: 5.9/10. Published 2018-07-10.

How severe is CVE-2018-2439?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Improper input validation in Sap Internet_graphics_server

CVE-2018-2439

The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has insufficient request validation (for example, where the request is validated for authenticity and validity) and under certain conditions, will process invalid req…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.016 (72.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Sap Internet_graphics_server — versions 7.20, 7.20ext, 7.45
Sap Internet Graphics Server (Igs) — versions = 7.20, = 7.20EXT, = 7.45

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cna@sap.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
cna@sap.com (x_refsource_CONFIRM, Vendor Advisory)
cna@sap.com (Permissions Required, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2018-2439?: CVE-2018-2439 is a medium-severity vulnerability in Sap Internet_graphics_server, classified under Improper Input Validation. CVSS score: 5.9/10. Published 2018-07-10.
How severe is CVE-2018-2439?: Medium severity. CVSS v3 base score is 5.9 out of 10.