The vulnerability of the SAP Fiori Client’s mobile execution environment, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the SAP Fiori Client mobile environment is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending empty push notifications remotely...

SAP J2EE Engine Cross-Site Scripting Vulnerability

SAP J2EE Engine is a set of runtime environments for J2EE applications. A cross-site scripting vulnerability exists in SAP J2EE Engine due to a failure of SAP J2EE Engine/7.01/Fiori to effectively validate or filter user-entered data, resulting in cross-site scripting in the "TestJDBCWeb/test2"...

SAP J2EE Engine/7.01/Fiori test2 Cross Site Scripting

I. VULNERABILITY ------------------------- SAP J2EE Engine/7.01/Fiori Reflected Cross Site Scripting XSS II. CVE REFERENCE ------------------------- CVE-2018-17862 III. VENDOR ------------------------- https://www.sap.com IV. TIMELINE ------------------------- 10/08/2018 Vulnerability discovered...

SAP J2EE Engine/7.01/Fiori Protocol Cross Site Scripting

I. VULNERABILITY ------------------------- SAP J2EE Engine/7.01/Fiori Reflected Cross Site Scripting XSS II. CVE REFERENCE ------------------------- Use CVE-2018-17865 III. VENDOR ------------------------- https://www.sap.com IV. TIMELINE ------------------------- 10/08/2018 Vulnerability...

CVE-2019-0251

The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2019-0251

The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

Cross site scripting

The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2019-0251

The CVE-2019-0251 entry affects SAP BusinessObjects BI Platform Fiori Launchpad (before 4.2 and 4.3). The root cause is insufficient encoding of user-controlled inputs, enabling Cross-Site Scripting (XSS). The vulnerability can allow the execution of arbitrary script in a user’s browser. The prov...

CVE-2019-0251

The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

PT-2019-4569

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects versions prior to 4.2 and 4.3 Description The issue is related to insufficient encoding of user-controlled inputs in the Fiori Launchpad of SAP BusinessObjects, resulting in a Cross-Site Scripting XSS issue. This can be...

CVE-2019-0251: Improper Neutralization of Input During Web Page Generation

The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

SAP Fiori Client Code Execution Vulnerability (CNVD-2019-04899)

SAP Fiori Client is a client program from SAP Germany for running the SAP Fiori Launchpad on mobile devices. A code execution vulnerability exists in SAP Fiori Client, which can be exploited by an attacker with the help of a malicious application to execute JavaScript code in the SAP Fiori...

SAP Fiori Client Denial of Service Vulnerability

SAP Fiori Client is a client program from SAP Germany for running the SAP Fiori Launchpad on mobile devices. A denial of service vulnerability exists in SAP Fiori Client, which can be exploited by an attacker with a malicious application to send local push notifications with null messages to Fior...

SAP Fiori Client Design Vulnerability

SAP Fiori Client is a client program from SAP Germany for running the SAP Fiori Launchpad on mobile devices. A security vulnerability exists in SAP Fiori Client. An attacker can exploit the vulnerability to remove the SSO configuration with the help of an arbitrary Android application...

SAP Fiori Client Information Disclosure Vulnerability

SAP Fiori Client is a client program from SAP Germany for running the SAP Fiori Launchpad on mobile devices. A security vulnerability exists in SAP Fiori Client that stems from the program's failure to protect permissions on incoming broadcast messages. An attacker could exploit the vulnerability...

SAP Fiori Client Code Execution Vulnerability

SAP Fiori Client is a client program from SAP Germany for running the SAP Fiori Launchpad on mobile devices. A code execution vulnerability exists in SAP Fiori Client that can be exploited by an attacker to execute malicious JavaScript code in an embedded log reader...

CVE-2018-2491

When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this URL contains malicious JavaScript code it can eventually run inside the built-in log viewer of the application in case user opens the viewer and taps on the...

CVE-2018-2491

When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this URL contains malicious JavaScript code it can eventually run inside the built-in log viewer of the application in case user opens the viewer and taps on the...

CVE-2018-2485

It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include reading and writing of information and calling device specific JavaScript APIs in the application. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues a...

Information disclosure

It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include reading and writing of information and calling device specific JavaScript APIs in the application. SAP Fiori Client version 1.11.5 in Google Play store addresses these issues a...