Oclean: community verdicts

1 notable / known-exploited Oclean CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Oclean CVE, see NVD ↗.

CVE-2020-25493HIGH 7.5Real · low riskEPSS 1%
Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic. The content of HTTP payload is encrypted using XOR with a hardcoded key, which allows for the possibility to decode the traffic.