CVE-2019-13100: Send-Anywhere Send Anywhere

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user via /data/data/com.estmob.android.sendanywhere/shared_prefs/sendanywhere_device.xml.

Affected products

• Send-Anywhere Send Anywhere: version 9.4.18 only

Published 2019-07-22. Last modified 2026-06-17.