PT-2018-15578

Name of the Vulnerable Software and Affected Versions SAP HCM Fiori "People Profile" version 6.0 Description The issue concerns a missing authorization check for an authenticated user, potentially leading to an escalation of privileges. Recommendations For SAP HCM Fiori "People Profile" version...

PT-2018-2620

Name of the Vulnerable Software and Affected Versions SAP Fiori Client versions prior to 1.11.5 Description The issue is related to insufficient access control in the SAP Fiori Client mobile environment, which may allow a remote attacker to disclose protected information. The broadcast messages...

CVE-2018-2461: Missing Authorization

Missing authorization check in SAP HCM Fiori "People Profile" GBX01 HR version 6.0 for an authenticated user which may result in an escalation of privileges...

PT-2018-2619

Name of the Vulnerable Software and Affected Versions SAP Fiori Client versions prior to 1.11.5 Description The issue is related to insufficient access control in the SAP Fiori Client mobile runtime environment. It allows a remote attacker to bypass the authorization system. Additionally, any...

PT-2018-2618

Name of the Vulnerable Software and Affected Versions SAP Fiori Client versions prior to 1.11.5 Description The issue is related to insufficient input validation in the SAP Fiori Client mobile environment. It allows a remote attacker to cause a denial of service by sending empty push notification...

Server side request forgery (ssrf)

Server Side Request Forgery SSRF vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server...

CVE-2018-2370

Server Side Request Forgery SSRF vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server...

CVE-2018-2370

CVE-2018-2370 describes an SSRF vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad (versions 4.10, 4.20, 4.30 and later in the affected line). The issue could let an attacker use standard techniques to determine which backend ports are in use. The connected docum...

PT-2018-15503

Name of the Vulnerable Software and Affected Versions SAP Central Management Console, BI Launchpad and Fiori BI Launchpad versions 4.10, from 4.20, from 4.30 Description The issue allows a malicious user to use common techniques to determine which ports are in use on the backend server. This is d...

CVE-2018-2370: Server-Side Request Forgery (SSRF)

Server Side Request Forgery SSRF vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allow a malicious user to use common techniques to determine which ports are in use on the backend server...

PT-2017-3777

Name of the Vulnerable Software and Affected Versions SAP Fiori Client versions prior to 1.11.5 Description The issue is related to insufficient access control in the SAP Fiori Client mobile environment, allowing a remote attacker to gain unauthorized access to protected information and execute...

SAP Fiori Client - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application SAP Fiori Client published at the 'play' market has multiple vulnerabilities...