CVE-2018-2482

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-11-13 · updated 2026-06-17

Description

SAP Mobile Secure Android Application, Mobile-secure.apk Android client, before version 6.60.19942.0, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Install the Mobile Secure Android client released in Mid-Oct 2018.

Affected products

SAP Mobile Secure Android Application: before 6.60.19942.0 — fixed in 6.60.19942.0

How to fix

Upgrade to a fixed version: SAP Mobile Secure Android Application 6.60.19942.0. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/105900
https://launchpad.support.sap.com/#/notes/2695896
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832
http://www.securityfocus.com/bid/105900
https://launchpad.support.sap.com/#/notes/2695896
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832

Get alerted when CVE-2018-2482 or the next vulnerability affects your stack