CVE-2018-2459: SAP Mobile Platform

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Users of an SAP Mobile Platform (version 3.0) Offline OData application, which uses Offline OData-supplied delta tokens (which is on by default), occasionally receive some data values of a different user.

Affected products

• SAP Mobile Platform: version 3.0 only

Published 2018-09-11. Last modified 2026-06-17.