Filtered by vendor Apple Subscriptions
Filtered by product Music Subscriptions
Total 7 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-32427 1 Apple 1 Music 2024-11-21 5.9 Medium
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic.
CVE-2023-28203 1 Apple 1 Music 2024-11-21 5.5 Medium
The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts.
CVE-2022-32906 1 Apple 1 Music 2024-11-21 5.3 Medium
This issue was addressed with using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.9.10 for Android. A user in a privileged network position may intercept SSL/TLS connections.
CVE-2022-32846 1 Apple 1 Music 2024-11-21 7.5 High
A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.
CVE-2022-32836 1 Apple 1 Music 2024-11-21 7.5 High
This issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.
CVE-2021-46841 1 Apple 1 Music 2024-11-21 5.9 Medium
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity.
CVE-2020-9982 1 Apple 1 Music 2024-11-21 5.5 Medium
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Apple Music 3.4.0 for Android. A malicious application may be able to leak a user's credentials.