NTT DATA Corporation
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| 'MyPallete' and some of the Android banking applications that use 'MyPallete' | 1 | – | Jan 28, 2020 |
| TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich) | 1 | – | Dec 5, 2022 |
Exploited and recent CVEs
- CVE-2022-43484 TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0.5.1 are vulnerable to a ClassLoader manipulation vulnerability due to using the 0.4%
- CVE-2020-5523 Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-mismat 1.2%