Invoicing

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-5791 MEDIUM POC This Month

PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Information Disclosure Invoicing

NVD

CVSS 2.0

5.8

EPSS

0.1%

CVE-2012-5791

EPSS 0% CVSS 5.8

MEDIUM POC This Month

PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Information Disclosure Invoicing

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy