This page aggregates publicly disclosed CVE and security risk information related to npci, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2017-9821 | The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings (AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM) for SMS validation, which makes it easier for attackers to bypass authentication. | [email protected] | 9.8 | 0.55% | 2018-08-24 | 2024-11-21 |
| CVE-2017-9820 | The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication. | [email protected] | 9.8 | 0.55% | 2018-08-24 | 2024-11-21 |
| CVE-2017-9819 | The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes it easier for attackers to bypass authentication. | [email protected] | 9.8 | 0.53% | 2018-08-24 | 2024-11-21 |
| CVE-2017-9818 | The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access. | [email protected] | 7.5 | 0.28% | 2018-08-24 | 2024-11-21 |