Vulnerabilities

TI-2022-14432 CVE-2022-32906 · GHSA-fr43-5hh3-gm58

Cleartext transmission of sensitive information in Apple Music for Android

LOW 24

This issue was addressed with using HTTPS when sending information over the network.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00353 Published 2023-02-27 Fixed in 3.9 CWE-319

TI-2022-14380 CVE-2022-32846 · GHSA-wj5g-5xxg-2f92

MEDIUM 40

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00613 Published 2023-02-27 Fixed in 3.9 CWE-664

TI-2022-14370 CVE-2022-32836 · GHSA-jv4h-v7cw-4f5c

MEDIUM 40

This issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00552 Published 2023-02-27 Fixed in 3.9 CWE-200