CVE-2016-1132
Shoplat App for iOS 1.10.00 through 1.18.00 does not properly verify SSL certificates.
Shoplat App for iOS 1.10.00 through 1.18.00 does not properly verify SSL certificates.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Shoplat App for iOS 1.10.00 through 1.18.00 does not properly verify SSL certificates.
- Record
CVE-2016-1132- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
CVE List No score
Shoplat App for iOS 1.10.00 through 1.18.00 does not properly verify SSL certificates.
- Record
CVE-2016-1132- Updated
- 2026-11-02
EUVDEUVD-2016-2236 No score
Shoplat App for iOS 1.10.00 through 1.18.00 does not properly verify SSL certificates.
- Record
EUVD-2016-2236- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g636-wxgp-6g5h
Shoplat App for iOS 1.10.00 through 1.18.00 does not properly verify SSL certificates.
Shoplat App for iOS 1.10.00 through 1.18.00 does not properly verify SSL certificates.
- Record
GHSA-g636-wxgp-6g5h- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-1132 is a high vulnerability (CVSS 7.5) in Docomo Shoplat, published April 13, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. No source names a fixed version.