Medium severity4.7NVD Advisory· Published Dec 11, 2018· Updated Jun 17, 2026

CVE-2018-2500

Description

Under certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711) allows an attacker to access information which would otherwise be restricted.

Affected products

SAP/Mobile Secure
cpe:2.3:a:sap:mobile_secure:*:*:*:*:*:android:*:*
Range: <=6.60.19942.0
SAP/Mobile Secure Android clientllm-fuzzy2 versions
<6.60.19942.0 SP28 1711+ 1 more
- (no CPE)range: <6.60.19942.0 SP28 1711
- (no CPE)range: < 6.60.19942.0 SP28 1711

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/106157nvdThird Party AdvisoryVDB Entry
launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000