VYPR
High severity7.8NVD Advisory· Published Nov 13, 2018· Updated Jun 17, 2026

CVE-2018-2490

CVE-2018-2490

Description

The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues and users must update to that version.

Affected products

3
  • SAP/Fiori Client3 versions
    cpe:2.3:a:sap:fiori_client:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sap:fiori_client:*:*:*:*:*:*:*:*range: <1.11.5
    • (no CPE)range: = 1.11.5
    • (no CPE)range: < 1.11.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.