What is CVE-2016-7812?

CVE-2016-7812 is a low-severity vulnerability in Mufg Mitsubishi Ufj, classified under Cryptographic Issues. CVSS score: 3.1/10. Published 2017-08-02.

How severe is CVE-2016-7812?

Low severity. CVSS v3 base score is 3.1 out of 10.

Vulnerability in Mufg Mitsubishi Ufj

CVE-2016-7812

The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication.

Vulnerability class: POODLE (CVE-2014-3566)

Published 2017-08-02 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N.

EPSS exploit prediction

EPSS: 0.008 (55.4th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 55th percentile — 55.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000

Affected products

Mufg Mitsubishi Ufj — versions 5.3.1
The Bank Of Tokyo-Mitsubishi Ufj, Ltd. App For Android — versions ver5.2.2 and earlier, ver5.3.1

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

jvn.jp/en/vu/JVNVU92900492/ (VDB Entry, Third Party Advisory)
www.securityfocus.com/bid/94829 (VDB Entry, Third Party Advisory, vdb-entry)

Frequently asked questions

What is CVE-2016-7812?: CVE-2016-7812 is a low-severity vulnerability in Mufg Mitsubishi Ufj, classified under Cryptographic Issues. CVSS score: 3.1/10. Published 2017-08-02.
How severe is CVE-2016-7812?: Low severity. CVSS v3 base score is 3.1 out of 10.