good records
3 published records for vendor good.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-345 Insufficient Verification of Data Authenticity1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2014-4925No exploit | Cross-site scripting (XSS) vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40.good · good for enterprise · CWE-79 | Medium6.1 | — | 1.1% | Aug 28, 2017 |
21Monitor | CVE-2015-9232No exploit | The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Delegation API intent.good · good for enterprise · CWE-345 | Medium5.3 | — | 0.9% | Sep 20, 2017 |
18Monitor | CVE-2013-5118Proof of concept | Cross-site scripting (XSS) vulnerability in the Good for Enterprise app before 2.2.4.1659 for iOS allows remote attackers to inject arbitrargood · good for enterprise · CWE-79 | Medium4.3 | — | 2.4% | Sep 25, 2013 |
- CVE-2014-492524Monitor
Cross-site scripting (XSS) vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40.
MediumCVSS 6.1No exploitEPSS 1%good · good for enterpriseAug 28, 2017
- CVE-2015-923221Monitor
The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Delegation API intent.
MediumCVSS 5.3No exploitEPSS 1%good · good for enterpriseSep 20, 2017
- CVE-2013-511818Monitor
Cross-site scripting (XSS) vulnerability in the Good for Enterprise app before 2.2.4.1659 for iOS allows remote attackers to inject arbitrar
MediumCVSS 4.3Proof of conceptEPSS 2%good · good for enterpriseSep 25, 2013