Sparkpay

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sparkpay records in CISA KEV

No Sparkpay vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Capital One Spark 1 record LOW

Records

1 record

TI-2014-04818 CVE-2014-5867 · GHSA-j743-6f95-3vfh

The Capital One Spark Pay (aka com.capitalone.sparkpay) application 0.9.81 for Android…

LOW 24

The Capital One Spark Pay (aka com.capitalone.sparkpay) application 0.9.81 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-11 No fix listed CWE-310

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0