CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-6636

The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using the Java Reflection API within crafted JavaScript code that is loaded into the WebView component in an application targeted to API level 16 or earlier, a related issue to CVE-2013-4710.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.563

EPSS Ranking 97.9%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2012-6636

Google » Android Api » Version: 1.0

cpe:2.3:a:google:android_api:1.0
Google » Android Api » Version: 10.0

cpe:2.3:a:google:android_api:10.0
Google » Android Api » Version: 11.0

cpe:2.3:a:google:android_api:11.0
Google » Android Api » Version: 12.0

cpe:2.3:a:google:android_api:12.0
Google » Android Api » Version: 13.0

cpe:2.3:a:google:android_api:13.0
Google » Android Api » Version: 14.0

cpe:2.3:a:google:android_api:14.0
Google » Android Api » Version: 15.0

cpe:2.3:a:google:android_api:15.0
Google » Android Api » Version: 16.0

cpe:2.3:a:google:android_api:16.0
Google » Android Api » Version: 2.0

cpe:2.3:a:google:android_api:2.0
Google » Android Api » Version: 3.0

cpe:2.3:a:google:android_api:3.0
Google » Android Api » Version: 4.0

cpe:2.3:a:google:android_api:4.0
Google » Android Api » Version: 5.0

cpe:2.3:a:google:android_api:5.0
Google » Android Api » Version: 6.0

cpe:2.3:a:google:android_api:6.0
Google » Android Api » Version: 7.0

cpe:2.3:a:google:android_api:7.0
Google » Android Api » Version: 8.0

cpe:2.3:a:google:android_api:8.0
Google » Android Api » Version: 9.0

cpe:2.3:a:google:android_api:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-6636

Products

Pricing

Contact Us