← All advisories

High severity8.1NVD Advisory· Published Jan 21, 2020· Updated Jun 17, 2026

CVE-2014-2680

CVE-2014-2680

Description

The update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code via a man-in-the-middle attack.

Affected products

3

Xmind/Xmind2 versions
cpe:2.3:a:xmind:xmind:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:xmind:xmind:*:*:*:*:*:*:*:*range: <=3.4.1
- (no CPE)range: <=3.4.1
Xmind/Xminddescription

Patches

Vulnerability mechanics

References

1

web.archive.org/web/20160822124252/http://rampartssecurity.com/docs/Xmind-MITM.pdfnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.