VULNERABILITY INTELLIGENCE

CVE-2014-3501

CVSS score4.3 MEDIUM

EPSS probability3.75%

CISA KEVNot currently listed

Published2014-11-15

Last modified2026-06-17

Description

Apache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and connect to arbitrary servers by using JavaScript to open WebSocket connections through WebView.