Read the docs

Disney

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Disney records in CISA KEV

No Disney vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Go Express Search 1 record LOW Maleficent Free Fall 1 record LOW Where's My Perry? Free 1 record LOW Where's My Water? Free 1 record LOW

Records

4 records

TI-2014-04800 CVE-2014-5849 · GHSA-xqr7-5xxr-2vp5

The Maleficent Free Fall (aka com.disney.maleficent_goo) application 1.2.0 for Android…

Priority LOW 24

The Maleficent Free Fall (aka com.disney.maleficent_goo) application 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-09 No fix listed CWE-310
TI-2014-04562 CVE-2014-5607 · GHSA-x479-rq9w-cm9j

The Where's My Water? Free (aka com.disney.WMWLite) application 1.9.1 for Android does…

Priority LOW 24

The Where's My Water? Free (aka com.disney.WMWLite) application 1.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive inform…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00339 Published 2014-09-09 No fix listed CWE-310
TI-2014-04561 CVE-2014-5606 · GHSA-8856-prg3-xw2r

The Where's My Perry? Free (aka com.disney.WMPLite) application 1.5.1 for Android does…

Priority LOW 24

The Where's My Perry? Free (aka com.disney.WMPLite) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive inform…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00317 Published 2014-09-09 No fix listed CWE-310
Open these records in search →