VYPR

Mobile Banking

by Usaa

CVEs (2)

  • CVE-2017-3213MedMay 5, 2017
    risk 0.38cvss 5.9epss 0.01

    The Think Mutual Bank Mobile Banking app 3.1.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

  • CVE-2015-1314Apr 16, 2015
    risk 0.00cvss epss 0.00

    The USAA Mobile Banking application before 7.10.1 for Android displays the most recently-used screen before prompting the user for login, which might allow physically proximate users to obtain banking account numbers and balances.