sbi records

3 published records for vendor sbi.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2018-17108No exploit	The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow attackers to perform Account Takeover attacks by intercesbi · sbi buddy Pre-auth	High8.8	—	1.1%	Sep 16, 2018
21Monitor	CVE-2018-17404No exploit	The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile sbi · sbi buddy · CWE-200 Pre-auth Info leak	Medium5.3	—	0.9%	Sep 23, 2018
21Monitor	CVE-2014-5954No exploit	The State Bank Anywhere (aka com.sbi.SBIFreedomPlus) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, whicsbi · state bank anywhere · CWE-310	Medium5.4	—	0.2%	Sep 18, 2014

CVE-2018-17108
35Monitor
The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow attackers to perform Account Takeover attacks by interce
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
sbi · sbi buddySep 16, 2018
CVE-2018-17404
21Monitor
The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Info leak
sbi · sbi buddySep 23, 2018
CVE-2014-5954
21Monitor
The State Bank Anywhere (aka com.sbi.SBIFreedomPlus) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, whic
MediumCVSS 5.4No exploitEPSS 0%
sbi · state bank anywhereSep 18, 2014