Vulnerability Details CVE-2020-14980
The Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate Validation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.0%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
References
- http://packetstormsecurity.com/files/158322/Sophos-Secure-Email-Android-Application-3.9.4-Man-In-The-Middle.html
- https://www.info-sec.ca/advisories/Sophos-Secure-Email.html
- http://packetstormsecurity.com/files/158322/Sophos-Secure-Email-Android-Application-3.9.4-Man-In-The-Middle.html
- https://www.info-sec.ca/advisories/Sophos-Secure-Email.html
Products affected by CVE-2020-14980
-
cpe:2.3:a:sophos:sophos_secure_email:3.9.4