CVE-2019-17355

9.8 criticalEPSS 1.3%

Critical (9.8) in orbitz orbitz. EPSS 1.3% chance of exploitation in the next 30 days.

In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2019-10-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

orbitz:orbitz

References

https://pastebin.com/GgpFz3ZW
https://pastebin.com/GgpFz3ZW

Check your stack JSON