What’s Vulnerable › Vulnerabilities

CVE-2016-7812

• Severity: low (CVSS 3.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-02 · updated 2026-06-17
• Weakness: CWE-310

Description

The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication.

Affected products

• The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android: through 5.2.2; 5.3.1

References

• http://www.securityfocus.com/bid/94829
• https://jvn.jp/en/vu/JVNVU92900492/
• http://www.securityfocus.com/bid/94829
• https://jvn.jp/en/vu/JVNVU92900492/

Get alerted when CVE-2016-7812 or the next vulnerability affects your stack