CVE-2016-7812

3.1 lowEPSS 0.8%

The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication.

Severity

CVSS 3.0

3.1 low

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-310
Published: 2017-08-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mufg:mitsubishi_ufj

References

http://www.securityfocus.com/bid/94829
https://jvn.jp/en/vu/JVNVU92900492/
http://www.securityfocus.com/bid/94829
https://jvn.jp/en/vu/JVNVU92900492/

Check your stack JSON