SAP Fiori Client
6 CVEs affecting SAP Fiori Client. Latest disclosed: 2021-08-10. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-2491 | High | 7.8 | 2018-11-13 | When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this URL contains malic… |
CVE-2018-2490 | High | 7.8 | 2018-11-13 | The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in Google Play store addresses these issu… |
CVE-2018-2489 | High | 7.8 | 2018-11-13 | Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client version 1.11.5 in Go… |
CVE-2018-2488 | High | 7.8 | 2018-11-13 | It is possible for a malware application installed on an Android device to send local push notifications with an empty message to SAP Fiori Client and cause th… |
CVE-2018-2485 | High | 7.7 | 2018-11-13 | It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include reading and writing of information and… |
CVE-2021-33699 | Medium | 6.5 | 2021-08-10 | Task Hijacking is a vulnerability that affects the applications running on Android devices due to a misconfiguration in their AndroidManifest.xml with their Ta… |