CVE-2013-5118

The CVE-2013-5118 entry describes a Cross-site Scripting (XSS) vulnerability in the Good for Enterprise iOS app. Affected versions are up to 2.2.4.1659 with the issue triggered by HTML email messages that can inject arbitrary script/HTML. The root cause is an HTML email handling flaw in Good for ...

CVE-2014-4925

The CVE-2014-4925 entry concerns Good for Enterprise for Android (versions 2.8.0.398 and 1.9.0.40) with a cross-site scripting/HTML-injection flaw in emails. Public disclosures describe a crafted HTML payload (notably a meta refresh) that can redirect users to a malicious URL when opening a messa...

CVE-2015-9232

The CVE-2015-9232 entry affects the Good for Enterprise Android app (version 3.0.0.415). The underlying issues are: (1) Authentication Delegation API intent does not use signature protection, and (2) the Good Dynamic activation process does not detect malicious activation attempts involving modif...