Mahadiscom Mahavitaran — known CVE vulnerabilities

Every CVE whose affected-product data names Mahadiscom Mahavitaran, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-27416 — CVSS 9.8 (critical): Mahavitaran android application 7.50 and prior are affected by account takeover due to improper OTP validation, allows remote attackers to…
• CVE-2021-41716 — CVSS 9.8 (critical): Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP…
• CVE-2020-27414 — CVSS 5.9 (medium): Mahavitaran android application 7.50 and prior transmit sensitive information in URL parameters. This may lead to information disclosure if…
• CVE-2020-27413 — CVSS 4.2 (medium): An issue was discovered in Mahavitaran android application 7.50 and below, allows local attackers to read cleartext username and password…