Pandora

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Pandora records in CISA KEV

No Pandora vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kmplayer 3 records LOW Pandora 1 record LOW

Records

1 record in Pandora · all components

TI-2017-02399 CVE-2017-3194 · GHSA-3j6h-ffr2-hw5m

Improper certificate validation in Pandora iOS App

LOW 38

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01282 Published 2017-12-15 Fixed in 8.3.2 CWE-295

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0