CVE-2018-2439

The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has insufficient request validation (for example, where the request is validated for authenticity and validity) and under certain conditions, will process invalid requests. Several areas of the SAP Internet Graphics Server (IGS) did not require sufficient input validation. Namely, the SAP Internet Graphics Server (IGS) HTTP and RFC listener, SAP Internet Graphics Server (IGS) portwatcher when registering a portwatcher to the multiplexer and the SAP Internet Graphics Server (IGS) multiplexer had insufficient input validation and thus allowing a malformed data packet to cause a crash.

• CWE-20

• http://www.securityfocus.com/bid/104708Third Party Advisory, VDB Entry
• https://launchpad.support.sap.com/#/notes/2644147Permissions Required, Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000Vendor Advisory
• http://www.securityfocus.com/bid/104708Third Party Advisory, VDB Entry
• https://launchpad.support.sap.com/#/notes/2644147Permissions Required, Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000Vendor Advisory

Published

Jul 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-2433SAP Gateway (SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP K…
• CVE-2018-2434A content spoofing vulnerability in the following components…
• CVE-2018-2435SAP NetWeaver Enterprise Portal from 7.0 to 7.02, 7.11, 7.20…
• CVE-2018-2436Executing transaction WRCK in SAP R/3 Enterprise Retail (EHP…
• CVE-2018-2437The SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45…
• CVE-2018-2438The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45,…
• CVE-2018-2440Under certain circumstances SAP Dynamic Authorization Manage…
• CVE-2018-2441Under certain conditions the SAP Change and Transport System…
• CVE-2018-2442In SAP BusinessObjects Business Intelligence, versions 4.0, …
• CVE-2018-2444SAP BusinessObjects Financial Consolidation, versions 10.0, …
• CVE-2018-2445AdminTools in SAP BusinessObjects Business Intelligence, ver…
• CVE-2018-2446Admin tools in SAP BusinessObjects Business Intelligence, ve…7.5