CO
Product
Cordova
On CISA KEVExploited in the wild
18
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 3Low 1
Watch
Add Cordova to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-1835 | 5.3 | Oct 27 | Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set explicit values in config.xml, allows remote attackers to modify undefined secondary… Affected: through 3.7.1; 4.0.0; 4.0.1 |
| CVE-2015-5207 | 5.3 | May 9 | Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection mechanism in an app and load arbitrary resources by leveraging unspecified methods Affected: through 3.9.1 |
| CVE-2015-5208 | 4.4 | May 9 | Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link Affected: through 3.9.1 |
Showing 3