{"id":"CVE-2012-2646","aliases":["EUVD-2012-2632","GHSA-j937-2jjc-fr52"],"status":"published","title":"The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before...","description":"The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01918,"percentile":0.80003,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2012-07-25T10:00:00Z","modified":"2026-06-16T23:41:48Z","products":[{"vendor":"fenrir-inc","product":"sleipnir_mobile"}],"references":[{"url":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://jvn.jp/en/jp/JVN88643450/index.html","tags":["third-party-advisory","x_refsource_JVN","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2646"},{"url":"https://github.com/advisories/GHSA-j937-2jjc-fr52"}],"sources":{"cve":[{"id":"CVE-2012-2646","description":"The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.","status":"published","published":"2012-07-25T10:00:00Z","modified":"2024-09-17T00:15:58.12Z","updated_at":"2026-11-02T14:34:50.263482Z"}],"euvd":[{"id":"EUVD-2012-2632","description":"The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.","status":"published","published":"2012-07-25T10:00:00Z","modified":"2024-09-17T00:15:58Z","updated_at":"2026-11-03T00:29:00.656249Z"}],"ghsa":[{"id":"GHSA-j937-2jjc-fr52","title":"The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before...","description":"The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.","status":"published","published":"2022-05-14T01:55:27Z","modified":"2023-02-02T05:04:59Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:51:59.92181Z"}],"nvd":[{"id":"CVE-2012-2646","description":"The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.","status":"published","published":"2012-07-25T10:42:35.32Z","modified":"2026-06-16T23:41:48.35Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:14.774945Z"}]}}