Cnnmoney Portfolio For Stocks

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-6883 MEDIUM This Month

The CNNMoney Portfolio for stocks (aka com.cnn.portfolio) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Cnnmoney Portfolio For Stocks

NVD

CVSS 2.0

5.4

EPSS

0.1%

CVE-2014-6883

EPSS 0% CVSS 5.4

MEDIUM This Month

The CNNMoney Portfolio for stocks (aka com.cnn.portfolio) application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Cnnmoney Portfolio For Stocks

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy