CVE-2018-2384

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Under certain conditions a malicious user provoking a Null Pointer dereference can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
SAP SE	SAP Internet Graphics Server	7.20; 7.20EXT; 7.45; 7.49; 7.53

References

https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/Vendor Advisory
https://launchpad.support.sap.com/#/notes/2525222Permissions Required, Vendor Advisory
https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/Vendor Advisory
https://launchpad.support.sap.com/#/notes/2525222Permissions Required, Vendor Advisory

Timeline

Published: Feb 14, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-23856.5Under certain conditions a malicious user provoking a divide by zero crash can prevent legitimate users from accessing the SAP Internet Grap CVE-2018-23866.5Under certain conditions a malicious user provoking an out of bounds buffer overflow can prevent legitimate users from accessing the SAP Int CVE-2018-23876.5A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to obtain information on CVE-2018-23886.1Stored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.CVE-2018-23895.7Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, hidin CVE-2018-23906.5Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT,CVE-2018-23916.5Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT,CVE-2018-23927.5Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropria CVE-2018-23937.5Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropria CVE-2018-23946.5Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS CVE-2018-23958.8Under certain conditions a malicious user may retrieve information on SAP Internet Graphic Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, ov CVE-2018-23966.5Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT,