Square Enix

square-enix

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Final Fantasy Xiv

final_fantasy_xiv

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-7295 1Square Enix 1Final Fantasy Xiv Jun 17, 2026 May 23, 2018 N/A· v4 8.1 HIGH· v3 4.3 MEDIUM· v2 ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During Transmission in a Communication Channel, allowing a man-in-the-middle attacker t...Show more ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During Transmission in a Communication Channel, allowing a man-in-the-middle attacker to steal user credentials because a session retrieves global.js via http before proceeding to use https. This is fixed in Patch 4.3.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-7295

1Square Enix

1Final Fantasy Xiv

Jun 17, 2026

May 23, 2018

N/A· v4

8.1 HIGH· v3

4.3 MEDIUM· v2

ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During Transmission in a Communication Channel, allowing a man-in-the-middle attacker to steal user credentials because a session retrieves global.js via http before proceeding to use https. This is fixed in Patch 4.3.Show less