Cnnmoney Portfolio For Stocks

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-6883 Oct 02, 10:55 MEDIUM This Month

The CNNMoney Portfolio for stocks (aka com.cnn.portfolio) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Cnnmoney Portfolio For Stocks

NVD

CVSS 2.0

5.4

EPSS

0.1%

CVE-2014-6883

EPSS 0% CVSS 5.4

MEDIUM This Month

The CNNMoney Portfolio for stocks (aka com.cnn.portfolio) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Cnnmoney Portfolio For Stocks

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy