Read the docs

Xda-developers

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Xda-developers records in CISA KEV

No Xda-developers vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Xda-developers · all components

Priority LOW 24

The XDA-Developers (aka com.quoord.tapatalkxda.activity) application 3.9.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-09 No fix listed CWE-310
Open these records in search →