SAP SAP Fiori Client
5 CVEs affecting SAP SAP Fiori Client. Latest disclosed: 2018-11-13. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-2491 | High | 7.8 | 2018-11-13 | When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this URL contains malic… |
CVE-2018-2490 | High | 7.8 | 2018-11-13 | The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in Google Play store addresses these issu… |
CVE-2018-2489 | High | 7.8 | 2018-11-13 | Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client version 1.11.5 in Go… |
CVE-2018-2488 | High | 7.8 | 2018-11-13 | It is possible for a malware application installed on an Android device to send local push notifications with an empty message to SAP Fiori Client and cause th… |
CVE-2018-2485 | High | 7.7 | 2018-11-13 | It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include reading and writing of information and… |