AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-18976

MEDIUM · CVSS 5.3 EPSS 1.14%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-05-06 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-18976
Severity
MEDIUM
CVSS
5.3
EPSS
1.14%
Android

Original NVD Description

An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. An attacker may retrieve encrypted medical information of any user of the Ascensia cloud platform by performing Direct Object References with a series of user ID values. (This information can be decrypted through a different vulnerability.)

Related CVEs

Other vulnerabilities affecting the same vendor(s)