SoFi
- Known vulnerabilities
- 0
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- —
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Based on permissions only: no CVE data referenced for this app.
Known vulnerabilities (CVE)
No CVE is currently referenced in NVD for this app on its platform.
The absence of CVEs is not a security guarantee — it can also mean nobody has audited or published findings.
Context
Context
Description
Why do 15.8M members love SoFi? Bank, invest, and own crypto all in one app. Open a bank account, track your budget, and manage your finances from anywhere. SOFI PLUS PREMIUM MEMBERSHIP • 4.50% APY on up to $20,000 in savings with a SoFi Plus membership. • 1% Invest Match on eligible deposits into taxable SoFi Invest® accounts. • Unlimited sessions with experienced SoFi Wealth Financial Planners. • 2x rewards points on qualifying account activity. NEW! BUY, SELL & HOLD CRYPTO • First national chartered bank where individuals can buy, sell, and hold cryptocurrency. • Access Bitcoin, Ethereum, Solana, plus 25+ cryptocurrencies on a platform with the safeguards of a bank. ONLINE BANKING • Open a bank account with no account, service, or maintenance fees and no minimum balance required. • Get paid up to 2 days early with direct deposit and early payday.⁶ • Mobile banking app to send money, transfer funds, pay bills, and manage your finances. HIGH-YIELD SAVINGS ACCOUNT • High-yield savings account with a high APY on your savings balance. • Savings Vaults help you organize your emergency fund and savings goals in one place.
Data collected and shared
Source: App Store · App Privacy · 10 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
FAQ
FAQ: SoFi
Why are no CVEs listed for SoFi?
No CVE is currently referenced in NVD for SoFi (com.sofi.mobile) with a iOS CPE configuration. Either none has been publicly disclosed, or none has been mapped yet. Absence of a CVE is not a security guarantee.
What is the latest known version of SoFi?
The most recent version of SoFi (com.sofi.mobile) tracked by Appaloosa Scout is 3.107.0, published by Social Finance, LLC.