7.4
CVSSv3

CVE-2019-7399

Published: 17/02/2019 Updated: 24/08/2020
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.4 | Impact Score: 5.2 | Exploitability Score: 2.2
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Summary

Amazon Fire OS prior to 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

amazon fire os

Exploits

Amazon FireOS version 5363 suffers from a content injection vulnerability via man-in-the-middle attacks ...

Mailing Lists

<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> Content Injection in Amazon's FireOS [CVE-2019-7399] <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Nigh ...