CVE-2018-2383

Reflected cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.

• CWE-79

• https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/Vendor Advisory
• https://launchpad.support.sap.com/#/notes/2525222Permissions Required, Vendor Advisory
• https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/Vendor Advisory
• https://launchpad.support.sap.com/#/notes/2525222Permissions Required, Vendor Advisory

Published

Feb 14, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-2377In SAP HANA Extended Application Services, 1.0, some general…
• CVE-2018-2378In SAP HANA Extended Application Services, 1.0, unauthorized…
• CVE-2018-2379In SAP HANA Extended Application Services, 1.0, an unauthent…
• CVE-2018-2380SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attack…6.6
• CVE-2018-2381SAP ERP Financials Information System (SAP_APPL 6.00, 6.02, …
• CVE-2018-2382A vulnerability in the SAP internet Graphics Server, 7.20, 7…
• CVE-2018-2384Under certain conditions a malicious user provoking a Null P…
• CVE-2018-2385Under certain conditions a malicious user provoking a divide…
• CVE-2018-2386Under certain conditions a malicious user provoking an out o…
• CVE-2018-2387A vulnerability in the SAP internet Graphics Server, 7.20, 7…
• CVE-2018-2388Stored cross-site scripting vulnerability in SAP internet Gr…
• CVE-2018-2389Under certain conditions a malicious user can inject log fil…