CVE-2018-2485

CVE-2018-2485 describes a high-severity vulnerability in SAP Fiori Client versions prior to 1.11.5, allowing malicious applications or malware to execute JavaScript within Fiori applications. This enables unauthorized reading/writing of information and calling of device-specific JavaScript APIs. With a CVSS score of 7.7, the vulnerability has a low attack complexity and requires no user interaction, potentially leading to high confidentiality and integrity impacts. While no public exploits or active exploitation have been observed, and community discussion is minimal, users are advised to update to the patched version.