CVE-2018-2460

2018-09-1115:00:00

sap

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.1%

JSON

SAP Business One Android application, version 1.2, does not verify the certificate properly for HTTPS connection. This allows attacker to do MITM attack.

CNA Affected

[
  {
    "product": "SAP Business One Android application",
    "vendor": "SAP",
    "versions": [
      {
        "status": "affected",
        "version": "= 1.2"
      }
    ]
  }
]