CVE-2018-2485

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include reading and writing of information and calling device specific JavaScript APIs in the application. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version.

Metrics

CVSS 3.0 7.7/10CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected software

Vendor	Product	Versions
SAP	SAP Fiori Client	< 1.11.5

References

http://www.securityfocus.com/bid/105911Third Party Advisory, VDB Entry
https://launchpad.support.sap.com/#/notes/2691126Permissions Required, Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832Vendor Advisory
http://www.securityfocus.com/bid/105911Third Party Advisory, VDB Entry
https://launchpad.support.sap.com/#/notes/2691126Permissions Required, Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832Vendor Advisory

Timeline

Published: Nov 13, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-24865.4SAP Marketing (UICUAN (1.20, 1.30, 1.40), SAPSCORE (1.13, 1.14)) does not sufficiently encode user-controlled inputs, resulting in Cross-Sit CVE-2018-24878.3SAP Disclosure Management 10.x allows an attacker to exploit through a specially crafted zip file provided by users: When extracted in speci CVE-2018-24887.8It is possible for a malware application installed on an Android device to send local push notifications with an empty message to SAP Fiori CVE-2018-24897.8Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client v CVE-2018-24907.8The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in Google Play store a CVE-2018-24917.8When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this CVE-2018-24927.1SAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents received from an untrusted source. This is fix CVE-2018-24948.0Necessary authorization checks for an authenticated user, resulting in escalation of privileges, have been fixed in SAP Basis AS ABAP of SAP CVE-2018-24972.7The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax CVE-2018-24997.5A security weakness in SAP Financial Consolidation Cube Designer (BOBJ_EADES fixed in versions 8.0, 10.1) may allow an attacker to discover CVE-2018-25004.7Under certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711) allows an attacker to access information w CVE-2018-250016.5An issue was discovered in the libpulse-binding crate before 2.5.0 for Rust. proplist::Iterator can cause a use-after-free.