CVE-2018-17404: Sbi Buddy

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile number, PAN number (from a government-issued ID), and date of birth.

Affected products

• Sbi Sbi Buddy: version 1.41 only; version 1.42 only

Published 2018-09-23. Last modified 2026-06-17.