What’s Vulnerable › Vulnerabilities

CVE-2019-13100

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-07-22 · updated 2026-06-17
• Weakness: CWE-312

Description

The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user via /data/data/com.estmob.android.sendanywhere/shared_prefs/sendanywhere_device.xml.

Affected products

• Send-Anywhere Send Anywhere: 9.4.18

References

• https://pastebin.com/Gdd0Shgr
• https://pastebin.com/Gdd0Shgr

Get alerted when CVE-2019-13100 or the next vulnerability affects your stack