← Back

Sbi

sbi

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Sbi Buddy
sbi_buddy
2 CVEs
State Bank Anywhere
state_bank_anywhere
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-17404
1Sbi
1Sbi Buddy
Nov 21, 2024
Sep 23, 2018
N/A· v4
5.3 MEDIUM· v3
2.6 LOW· v2
The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile number, PAN number (from a government-issued ID), and date of birth.
CVE-2018-17108
1Sbi
1Sbi Buddy
Nov 21, 2024
Sep 16, 2018
N/A· v4
8.8 HIGH· v3
4.3 MEDIUM· v2
The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow attackers to perform Account Takeover attacks by intercepting a security-question response during the initial configuration of the appli...Show more
The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow attackers to perform Account Takeover attacks by intercepting a security-question response during the initial configuration of the application.Show less
CVE-2014-5954
1Sbi
1State Bank Anywhere
May 6, 2026
Sep 18, 2014
N/A· v4
N/A· v3
5.4 MEDIUM· v2
The State Bank Anywhere (aka com.sbi.SBIFreedomPlus) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive infor...Show more
The State Bank Anywhere (aka com.sbi.SBIFreedomPlus) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.Show less