📦

yahoo_ybox

Vendor: yahoo

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 4 Total Indexed
Avg. EPSS 0.35% Exploit Prob.
Latest CVE CVE-2014-5881 Sep 11

Security Vulnerability Index

Page 1 / 1
5.4 CVSS
CVE-2014-5881

The Yahoo! Japan Box (aka jp.co.yahoo.android.ybox) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

EPSS: 0.35%