CVE-2016-4840

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-295

Affected software

No affected versions have been published.

Timeline

Published
Apr 21, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-48414.3Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers.CVE-2016-48424.3Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.CVE-2016-48436.5Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.CVE-2016-48444.3Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.CVE-2016-48458.8Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0CVE-2016-48467.8Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer before 3.7.8.2.CVE-2016-48476.1Cross-site scripting (XSS) vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web scripCVE-2016-48486.1Cross-site scripting (XSS) vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via uCVE-2016-48496.1Multiple cross-site scripting (XSS) vulnerabilities in Geeklog IVYWE edition 2.1.1 allow remote attackers to inject arbitrary web script or CVE-2016-48508.1LINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code.CVE-2016-48516.1Cross-site scripting (XSS) vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script CVE-2016-48526.5YoruFukurou (NightOwl) before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTF
CVE-2016-4840: Medium severity, CVSS 5.9 | Vulnix