Unscored severity · published Feb 24, 2015
CVE-2014-8487
Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to…
–
CVSS
1%
EPSS
No
On KEV
Description
Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to selfservice/managedevice/getMessageBody or (2) requests via the requestId parameter to selfservice/devicemgmt/getDeviceInfoTab.htm.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Enterprise Mobile Management · Kony
through 1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8487
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8487
www.securityfocus.com
http://www.securityfocus.com/archive/1/534739/100/0/threaded
Exploit
http://www.securityfocus.com/bid/72714
More from Enterprise Mobile Management
6.5
CVE-2017-5672
Kony Enterprise Mobile Management (EMM) before 4.2.5.2 has the vulnerability of disclosing the private key in clear-text when changing the parameters of the request