Skip to main content

Vip

2 CVEs product

Monthly

CVE-2019-12754 Aug 30, 09:15 MEDIUM This Month

Symantec My VIP portal, previous version which has already been auto updated, was susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Symantec Vip
NVD
CVSS 3.0
4.8
EPSS
0.6%
CVE-2017-13127 Oct 20, 18:29 HIGH This Week

The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access point and a man-in-the-middle attack. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Google Apple Vip
NVD
CVSS 3.0
8.1
EPSS
0.7%
EPSS 1% CVSS 4.8
MEDIUM This Month

Symantec My VIP portal, previous version which has already been auto updated, was susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Symantec Vip
NVD
EPSS 1% CVSS 8.1
HIGH This Week

The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access point and a man-in-the-middle attack. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Google Apple +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy