VULNERABILITY INTELLIGENCE

CVE-2014-1449

CVSS score5 MEDIUM
EPSS probability1.92%
CISA KEVNot currently listed
Published2014-12-25
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API.

Weakness classification

  • CWE-284: Improper Access Control

Primary references