rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-25430 Paroiciel 11.20 SQL Injection via eGeqIdEquipe Parameter
Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the eGeqIdEquipe parameter. Attackers can send GET requests to the egeq.php endpoint with crafted SQL payloads to extract sensitive database information including version details and other data.
Problem types: cwe_id: CWE-89
description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Paroiciel
product: Paroiciel
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
version: 3.1
Credits: lang: en
value: Ihsan Sencan
Published: 2026-06-01T21:00:20.925Z
CVE-2018-25431 No-Cms 1.0 SQL Injection via order_by Parameter
No-Cms 1.0 contains an SQL injection vulnerability in the order_by parameter of the manage_privilege export endpoint that allows authenticated attackers to manipulate database queries. Attackers can submit POST requests to /nocms/main/manage_privilege/index/export with malicious SQL code in the order_by[0] parameter to extract sensitive database information.
Problem types: cwe_id: CWE-89
description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: goFrendiAsgard
product: No-CMS
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
version: 3.1
Credits: lang: en
value: Loading Kura Kura
Published: 2026-06-01T21:00:21.652Z
CVE-2018-25432 Arm Whois 3.11 Buffer Overflow via ASLR Bypass
Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through exception handler hijacking.
Problem types: cwe_id: CWE-120
description: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: Armcode
product: Arm Whois
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: zephyr
Published: 2026-06-01T21:00:22.371Z
CVE-2018-25433 Joomla JE Photo Gallery 1.1 SQL Injection via categoryid
Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code through the categoryid parameter. Attackers can send GET requests to index.php with crafted categoryid values in the com_jephotogallery component to execute arbitrary SQL queries and retrieve sensitive data like usernames and password hashes.
Problem types: cwe_id: CWE-89
description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Joomlaextensions
product: JE Photo Gallery
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
version: 3.1
Credits: lang: en
value: Ihsan Sencan
Published: 2026-06-01T21:00:23.105Z
CVE-2018-25434 WP AutoSuggest 0.24 SQL Injection via autosuggest.php
WP AutoSuggest 0.24 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wpas_keys parameter. Attackers can send GET requests to autosuggest.php with crafted wpas_keys values to extract sensitive database information from WordPress posts and other tables.
Problem types: cwe_id: CWE-89
description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: eliekhoury
product: WP AutoSuggest
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
version: 3.1
Credits: lang: en
value: Kaimi
Published: 2026-06-01T21:00:23.852Z
CVE-2018-25435 ZeusCart 4.0 Deactivate Customer Accounts CSRF
ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by crafting malicious requests. Attackers can deactivate customer accounts via the admin interface by tricking users into visiting attacker-controlled pages that submit requests to the regstatus endpoint with action=deny parameters.
Problem types: cwe_id: CWE-352
description: Cross-Site Request Forgery (CSRF)
Affected products: vendor: zeuscart
product: ZeusCart
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: mqt
Published: 2026-06-01T21:00:24.645Z
CVE-2018-2000 
IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 154890.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Business Automation Workflow
Published: 2019-04-08T14:50:38.043Z
CVE-2018-2001 
IBM Cram Social Program Management 6.1.1, 6.2.0, 7.0.4, and 7.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 154891.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Cram Social Program Management
Published: 2019-05-07T18:35:20.747Z
CVE-2018-2004 
IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155006.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Jazz Reporting Service
Published: 2019-04-29T16:35:17.609Z
CVE-2018-2005 
IBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that could be read by a local attacker with elevated permissions. IBM X-Force ID: 155007
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: BigFix Platform
Published: 2019-05-20T17:25:23.312Z
CVE-2018-2006 
IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to upload arbitrary files to the system. IBM X-Force ID: 155008.
Problem types: description: File Manipulation
Affected products: vendor: IBM
product: Robotic Process Automation with Automation Anywhere
Published: 2019-02-21T17:00:00.000Z
CVE-2018-2007 
IBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 155078.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: API Connect
Published: 2019-04-29T16:35:17.651Z
CVE-2018-2008 
IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 could disclose sensitive information to an authenticated user that could aid in further attacks against the system. IBM X-Force ID: 155146.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: TRIRIGA Application Platform
Published: 2019-05-07T18:35:20.786Z
CVE-2018-2009 
IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: API Connect
Published: 2019-03-11T22:00:00.000Z
CVE-2018-2011 
IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 155150.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: API Connect
Published: 2019-06-25T15:45:29.729Z
CVE-2018-2013 
IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in further attacks against the system. IBM X-Force ID: 155193.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: API Connect
Published: 2019-06-25T15:45:29.777Z
CVE-2018-2015 
IBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 155195.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: API Connect
Published: 2019-05-02T16:00:19.404Z
CVE-2018-2019 
IBM Security Identity Manager 6.0.0 Virtual Appliance is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 155265.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Identity Manager
Published: 2019-01-18T17:00:00.000Z
CVE-2018-2021 
IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155345.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2019-07-17T14:05:20.808Z
CVE-2018-2022 
IBM QRadar SIEM 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 155346.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2019-07-17T14:05:20.852Z
CVE-2018-2024 
IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 155350.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2019-07-22T13:35:13.670Z
CVE-2018-2025 
IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Backup-Archive Client
vendor: IBM
product: Spectrum Protect for Virtual Environments
Published: 2019-11-25T17:01:23.893Z
CVE-2018-2026 
IBM Financial Transaction Manager 3.2.1 for Digital Payments could allow an authenticated user to obtain a directory listing of internal product files. IBM X-Force ID: 155552.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Financial Transaction Manager
Published: 2019-01-23T16:00:00.000Z
CVE-2018-2028 
IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target page with a phishing site which could allow the attacker to obtain highly sensitive information. IBM X-Force ID: 155554.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2019-06-06T00:35:18.707Z
CVE-2018-2360 
SAP Startup Service, SAP KERNEL 7.45, 7.49, and 7.52, is missing an authentication check for functionalities that require user identity and cause consumption of file system storage.
Problem types: description: Missing Authentication
Affected products: vendor: SAP SE
product: SAP Startup Service
Published: 2018-01-09T15:00:00.000Z
CVE-2018-2361 
In SAP Solution Manager 7.20, the role SAP_BPO_CONFIG gives the Business Process Operations (BPO) configuration user more authorization than required for configuring the BPO tools.
Problem types: description: Missing Authorization Check
Affected products: vendor: SAP SE
product: SAP Solution Manager
Published: 2018-01-09T15:00:00.000Z
CVE-2018-2362 
A remote unauthenticated attacker, SAP HANA 1.00 and 2.00, could send specially crafted SOAP requests to the SAP Startup Service and disclose information such as the platform's hostname.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP HANA
Published: 2018-01-09T15:00:00.000Z
CVE-2018-2363 
SAP NetWeaver, SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, contains code that allows you to execute arbitrary program code of the user's choice. A malicious user can therefore control the behaviour of the system or can potentially escalate privileges by executing malicious code without legitimate credentials.
Problem types: description: Code Injection
Affected products: vendor: SAP SE
product: SAP NetWeaver
Published: 2018-01-09T15:00:00.000Z
CVE-2018-2364 
SAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently validate and/or encode hidden fields, resulting in Cross-Site Scripting (XSS) vulnerability.
Problem types: description: Cross-Site Scripting (XSS)
Affected products: vendor: SAP SE
product: SAP CRM WebClient UI
vendor: SAP SE
product: S4FND
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2365 
SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Problem types: description: Cross-Site Scripting (XSS)
Affected products: vendor: SAP SE
product: SAP NetWeaver Portal WebDynpro RunTime
Published: 2018-03-01T17:00:00.000Z
CVE-2018-2366 
SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs.
Problem types: description: Directory Traversal)
Affected products: vendor: SAP SE
product: SAP Business Process Automation (BPA) By Redwood
Published: 2018-03-14T19:00:00.000Z
CVE-2018-2367 
ABAP File Interface in, SAP BASIS, from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.
Problem types: description: Directory Traversal
Affected products: vendor: SAP SE
product: SAP BASIS (ABAP File Interface)
Published: 2018-03-01T17:00:00.000Z
CVE-2018-2368 
SAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform any authentication checks for functionalities that require user identity.
Problem types: description: Missing Authentication Check
Affected products: vendor: SAP SE
product: SAP NetWeaver System Landscape Directory, LM-Core
Published: 2018-03-01T17:00:00.000Z
CVE-2018-2369 
Under certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access information which would otherwise be restricted. An attacker can misuse the authentication function of the SAP HANA server on its SQL interface and disclose 8 bytes of the server process memory. The attacker cannot influence or predict the location of the leaked memory.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP HANA
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2370 
Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server.
Problem types: description: Server Side Request Forgery (SSRF)
Affected products: vendor: SAP SE
product: SAP BI Launchpad
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2371 
The SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not sufficiently encode user controlled inputs, which results in Cross-Site Scripting (XSS) vulnerability.
Problem types: description: Cross-Site Scripting (XSS)
Affected products: vendor: SAP SE
product: SAP NetWeaver Java Web Application
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2372 
A plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could endanger confidentiality of SSL communication.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP HANA Extended Application Services
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2373 
Under certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to execute SQL statements that deliver information about system configuration in SAP HANA Extended Application Services, 1.0.
Problem types: description: SQL Injection
Affected products: vendor: SAP SE
product: SAP HANA Extended Application Services
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2374 
In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve sensitive application data like service bindings within that space.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP HANA Extended Application Services
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2375 
In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP HANA Extended Application Services
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2376 
In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP HANA Extended Application Services
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2377 
In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved by unauthorized users.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP HANA Extended Application Services
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2378 
In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications including resource consumption.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP HANA Extended Application Services
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2379 
In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP HANA Extended Application Services
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2380 
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.
Problem types: description: Directory/Path Traversal
Affected products: vendor: SAP SE
product: SAP CRM
Published: 2018-03-01T17:00:00.000Z
CVE-2018-2381 
SAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Problem types: description: Missing Authorization Check
Affected products: vendor: SAP SE
product: SAP ERP Financials Information System
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2382 
A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to store graphics in a controlled area and as such gain information from system area, which is not available to the user otherwise.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2383 
Reflected cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.
Problem types: description: Reflected Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2384 
Under certain conditions a malicious user provoking a Null Pointer dereference can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services.
Problem types: description: Denial-of-Service
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2385 
Under certain conditions a malicious user provoking a divide by zero crash can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services.
Problem types: description: Denial-of-Service
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2386 
Under certain conditions a malicious user provoking an out of bounds buffer overflow can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53.
Problem types: description: Denial-of-Service
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2387 
A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to obtain information on ports, which is not available to the user otherwise.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2388 
Stored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.
Problem types: description: Cross-site Scripting
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z
CVE-2018-2389 
Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, hiding important information in the log file.
Problem types: description: Log Injection
Affected products: vendor: SAP SE
product: SAP Internet Graphics Server
Published: 2018-02-14T12:00:00.000Z