Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerability · NVD

CVE-2017-2480

CVE-2017-2480, medium severity (CVSS 6.5): 2 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS)
6.5

NVD scale

Exploitation
4.3 %

EPSS, predicted over 30 days

Tracked apps
2
Still exposed
0
Public exploit : ExploitDB

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.

Attack vector : Network No privileges required
Show raw CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS 4.31% above median percentile 90.9%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

  • Safari macOS com.apple.Safari
    Affected ≤10.0.3 Fixed in > 10.0.3 Latest tracked - undetermined
  • iTunes Windows winget:Apple.iTunes
    Affected ≤12.5.5.5 Fixed in > 12.5.5.5 Latest tracked 12.13.11.1 patched
    Observed affected builds (1)
    10.7.0.21
Vulnerable CPE configurations (2)
Vendor Product Versions
apple itunes
Windows
 ≤12.5.5.5
apple safari
All platforms (wildcard)
 ≤10.0.3
View on NVD ↗ Advisory · support.apple.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM