Vulnerabilities

TI-2018-12401 CVE-2018-17404 · GHSA-j54f-v753-m27c

The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an…

LOW 26

The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile number, PAN number (from a government-issued ID), and date of birth.

CVSS 3.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00938 Published 2018-09-23 No fix listed CWE-200

TI-2018-12229 CVE-2018-17108 · GHSA-jxx3-3xcq-9jq9

The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow…

MEDIUM 40

The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow attackers to perform Account Takeover attacks by intercepting a security-question response during the initial configuration of the appli…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01146 Published 2018-09-16 No fix listed

TI-2014-04904 CVE-2014-5954 · GHSA-6f52-ww33-g4vr

The State Bank Anywhere (aka com.sbi.SBIFreedomPlus) application 2.0.1 for Android does…

LOW 24

The State Bank Anywhere (aka com.sbi.SBIFreedomPlus) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive infor…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-18 No fix listed CWE-310

Vulnerabilities

Filters

The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an…

The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow…

The State Bank Anywhere (aka com.sbi.SBIFreedomPlus) application 2.0.1 for Android does…