CVE-2020-8274CWE-94

Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read…

published January 6, 2021

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read data stored within Secure Mail. Note that a malicious app would need to be installed on the Android device or a threat actor would need to execute arbitrary code on the Android device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02126 · 81.8th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2021-01-06T20:59Z
EPSS history
Timeline
  • 06 JAN 20:59Z
    Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read…
    cvelistv5