MTA TrainTime
- Known vulnerabilities
- 0
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- —
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Based on permissions only: no CVE data referenced for this app.
Known vulnerabilities (CVE)
No CVE is currently referenced in NVD for this app on its platform.
The absence of CVEs is not a security guarantee — it can also mean nobody has audited or published findings.
Context
Context
Description
The TrainTime app provides a one-stop shop for Long Island Rail Road and Metro-North Railroad customers, where riders can buy and use tickets, plan their trips, track their trains, and more. • Buy tickets with Apple Pay or credit/debit card. Split payment between two cards. • Plan trips with departure times and transfer details before you travel. You can also search for two origin and/or two destination stations at once. • Save your frequent trains for easy access • Share trips with family and friends so they know when to expect you • Follow your trip with real-time GPS tracking, updated every few seconds • See the layout of your train and how crowded each car is • Chat with a customer service representative for either LIRR or Metro-North within the app
Data collected and shared
Source: App Store · App Privacy · 5 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
Other apps by this publisher
Apps published by MTA/New York City Transit
FAQ
FAQ: MTA TrainTime
Why are no CVEs listed for MTA TrainTime?
No CVE is currently referenced in NVD for MTA TrainTime (com.mta.mobileapp) with a iOS CPE configuration. Either none has been publicly disclosed, or none has been mapped yet. Absence of a CVE is not a security guarantee.
What is the latest known version of MTA TrainTime?
The most recent version of MTA TrainTime (com.mta.mobileapp) tracked by Appaloosa Scout is 10.9.0, published by MTA/New York City Transit.