CVE-2014-3500

medium

Apache

CVSS v3 Base Score

6.4

AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS Score

1.2%

Exploitation probability in 30 days

Top 21% most likely to be exploited

Attack Characteristics

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

None

Published: November 15, 2014 (4198 days ago)

Last Modified: May 6, 2026

Vendor: Apache

Source: NVD

Description

Apache Cordova Android before 3.5.1 allows remote attackers to change the start page via a crafted intent URL.

CWE-17

apache cordova