Fiori Client (Sap) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 24 known versions, newest CVE from 2021-08-10. Vendor: Sap.

CVEs of Fiori Client

• CVE-2021-33699 - CVSS 7.6 (high), 2021-08-10: Task Hijacking is a vulnerability that affects the applications running on Android devices due to a misconfiguration in their AndroidManifest.xml with their…
• CVE-2018-2491 - CVSS 7.8 (high), 2018-11-13: When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this URL contains…
• CVE-2018-2489 - CVSS 7.8 (high), 2018-11-13: Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client version 1.11.5 in…
• CVE-2018-2488 - CVSS 7.8 (high), 2018-11-13: It is possible for a malware application installed on an Android device to send local push notifications with an empty message to SAP Fiori Client and cause…
• CVE-2018-2485 - CVSS 7.7 (high), 2018-11-13: It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include reading and writing of information…
• CVE-2018-2490 - CVSS 7.8 (high), 2018-11-13: The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in Google Play store addresses these…