CVE-2016-7812: Mufg Mitsubishi Ufj

Low severity, CVSS 3.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication.

Affected products

• Mufg Mitsubishi Ufj: up to and including 5.2.2; version 5.3.1 only

Published 2017-08-02. Last modified 2026-06-17.