MO
Product
Mobile@work
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch
Add Mobile@work to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-35138 | 9.8 | Mar 29 | The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key, used to encrypt the submission of username/password details during the… Affected: through 2021-03-22; through 2021-03-22 |
| CVE-2020-35137 | 7.5 | Mar 29 | The MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded API key, used to communicate with the MobileIron SaaS discovery API, as demonstrated by… Affected: through 2021-03-22; through 2021-03-22 |
| CVE-2021-3391 | 5.3 | Mar 29 | MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled, and nonexistent user accounts by observing the number of failed login attempts… Affected: through 11.0.0.0.115r; through 12.11.1 |
| CVE-2014-5903 | – | Sep 15 | The Mobile@Work (aka com.mobileiron) application 6.0.0.1.12R for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Affected: 6.0.0.1.12r |
Showing 4