CVE-2018-2489

概要

参考情報

• launchpad.support.sap.com · Release Notes
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

fiori client のその他の脆弱性

• CVE-2021-33699中 6.5Task Hijacking is a vulnerability that affects the applications running on Android devices due to a misconfiguration in their AndroidManifes…
• CVE-2018-2491高 7.8When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this…
• CVE-2018-2490高 7.8The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in Google Play store a…
• CVE-2018-2488高 7.8It is possible for a malware application installed on an Android device to send local push notifications with an empty message to SAP Fiori …
• CVE-2018-2485高 7.7It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include reading and writing…