usa.adidas.com XSS vulnerability

Open Bug Bounty ID: OBB-65897 Description| Value ---|--- Affected Website:| usa.adidas.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

CVE-2014-6995

The adidas eyewear aka com.adidasep.eyewear application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The adidas eyewear aka com.adidasep.eyewear application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6995

The CVE concerns the adidas eyewear (com.adidasep.eyewear) Android app, version 1.2, which does not verify X.509 certificates when establishing SSL connections. This permits man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD entry note...

CVE-2014-6995

The adidas eyewear aka com.adidasep.eyewear application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5532

The Honolulu (aka adidas.jp.android.running.honolulu) Android app (version 2) is affected by CVE-2014-5532 due to not verifying X.509 certificates from SSL servers. This weakness enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The v...