Npci Bharat Interface For Money (bhim) — known CVE vulnerabilities

Every CVE whose affected-product data names Npci Bharat Interface For Money (bhim), ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2017-9819 — CVSS 9.8 (critical): The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes…
• CVE-2017-9820 — CVSS 9.8 (critical): The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available…
• CVE-2017-9821 — CVSS 9.8 (critical): The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings (AK-NPCIMB, IM-NPCIBM, and…
• CVE-2017-9818 — CVSS 7.5 (high): The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for…