Vendors / Ana Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Ana records in CISA KEV No Ana vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 33
The ANA App for iOS version 4.0.22 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS 3.0 HIGH 7.4· Network · No auth · No interaction · EPSS 0.00495 · Published 2018-06-26 · No fix listed CWE-295
Priority LOW 28
ANA App for Android 3.1.1 and earlier, and ANA App for iOS 3.3.6 and earlier does not verify SSL certificates.
CVSS 3.0 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00898 · Published 2017-09-25 · No fix listed CWE-295
Open these records in search → All records by CVSS severity
0 1 1 0 0
