Read the docs

Swiftkey

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Swiftkey records in CISA KEV

No Swiftkey vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Swiftkey Sdk · all components

Priority LOW 35

Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices allows remote web servers to write to arbitrary files, and consequently execute arbi…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03683 Published 2015-06-19 No fix listed CWE-22
Priority LOW 16

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to langu…

CVSS 2.0LOW 2.9 Adjacent network No auth Interaction — EPSS 0.00945 Published 2015-06-19 No fix listed CWE-254
Open these records in search →