CVE-2015-5666: Ana All Nippon Airways

Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days.

ANA App for Android 3.1.1 and earlier, and ANA App for iOS 3.3.6 and earlier does not verify SSL certificates.

Affected products

• Ana All Nippon Airways: up to and including 3.1.1; up to and including 3.3.6

Published 2017-09-25. Last modified 2026-06-17.