CVE Daily

CVE-2018-2485

It is possible for a malicious application or malware to execute JavaScript in a...

High CVSS 7.7

Overview

It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include reading and writing of information and calling device specific JavaScript APIs in the application. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version.

CWE: N/A Published: 2018-11-13T20:29:00.717
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.7 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags