Windows Live Hotmail Push Mail

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-5854 MEDIUM This Month

The Windows Live Hotmail PUSH mail (aka com.clearhub.wl) application 1.00.97 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Microsoft Windows Live Hotmail Push Mail

NVD

CVSS 2.0

5.4

EPSS

0.1%

CVE-2014-5854

EPSS 0% CVSS 5.4

MEDIUM This Month

The Windows Live Hotmail PUSH mail (aka com.clearhub.wl) application 1.00.97 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers. Rated medium severity (CVSS 5.4). No vendor patch available.

Google Information Disclosure Microsoft +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy