What’s Vulnerable › Vulnerabilities
CVE-2019-8345
- Severity: medium (CVSS 4.2 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-02-15 · updated 2026-06-17
- Weakness: CWE-319
Description
The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL.
Affected products
- Estrongs Es File Explorer File Manager: 4.1.9.7.4
References
Get alerted when CVE-2019-8345 or the next vulnerability affects your stack