CVE-2019-17396

9.8 criticalEPSS 1.2%

Critical (9.8) in powerschool powerschool mobile. EPSS 1.2% chance of exploitation in the next 30 days.

In the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2019-10-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

powerschool:powerschool_mobile

References

https://pastebin.com/9VBiRpAR
https://pastebin.com/9VBiRpAR

Check your stack JSON