PA
Product
Paypal
by Paypal · last CVE Apr 27, 2018
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add Paypal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2013-7202
8.1
2%
Apr 27
The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system
Affected: through 5.3
CVE-2013-7201
7.4
2%
Apr 27
WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information
Affected: through 5.3
CVE-2012-5802
–
1%
Nov 4
The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate,…
Affected: All versions, or not specified
Showing 3