Marathon Rewards
- Known vulnerabilities
- 0
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- —
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Based on permissions only: no CVE data referenced for this app.
Known vulnerabilities (CVE)
No CVE is currently referenced in NVD for this app on its platform.
The absence of CVEs is not a security guarantee — it can also mean nobody has audited or published findings.
Context
Context
Description
Marathon Rewards is a customer loyalty program where members earn and redeem Rewards at participating Marathon or ARCO locations. Members that participate in Marathon Rewards can earn Rewards on fuel or qualifying products or services in-store or with a third-party partner. Members earn $0.05 of Marathon Rewards for every 1 gallon of fuel purchased and Rewards can be redeemed at the fuel pump.
Data collected and shared
Source: App Store · App Privacy · 8 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
FAQ
FAQ: Marathon Rewards
Why are no CVEs listed for Marathon Rewards?
No CVE is currently referenced in NVD for Marathon Rewards (ai.oc.experience.marathonrewards) with a iOS CPE configuration. Either none has been publicly disclosed, or none has been mapped yet. Absence of a CVE is not a security guarantee.
What is the latest known version of Marathon Rewards?
The most recent version of Marathon Rewards (ai.oc.experience.marathonrewards) tracked by Appaloosa Scout is 26.4, published by Stuzo, LLC.