Approved changes feed: RSS · Atom

cpe:2.3:a:usbank:academy_sports_\+_outdoors_visa:1.18:*:*:*:*:android:*:*

part: a version: 1.18 update: *

VendorUsbank (5b767cd0-5b8e-5e27-a36b-b8fabc4731b5)
ProductAcademy Sports + Outdoors Visa (9178dd29-309a-589a-9a69-1ef45fc670e8)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-6885 vulnerable 2026-06-08 05:05:58.406599 Details available
The Academy Sports + Outdoors Visa (aka com.usbank.icsmobile.academysports) application 1.18 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Published: 2014-10-02T10:00:00.000Z
Updated: 2024-08-06T12:31:47.058Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.