VULNERABILITY INTELLIGENCE

CVE-2015-5632

CVSS score6.8 MEDIUM
EPSS probability1.09%
CISA KEVNot currently listed
Published2015-09-20
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors.

Primary references