Dario Health Dario Application Database And Internet-Based Server Infrastructure
7 CVEs affecting Dario Health Dario Application Database And Internet-Based Server Infrastructure. Latest disclosed: 2025-02-28. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-20060 | High | 7.5 | 2025-02-28 | An attacker could expose cross-user personal identifiable information (PII) and personal health information transmitted to the Android device via the Dario Hea… |
CVE-2025-24849 | High | 7.1 | 2025-02-28 | Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure. |
CVE-2025-24318 | Medium | 6.8 | 2025-02-28 | Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise. |
CVE-2025-20049 | Medium | 5.8 | 2025-02-28 | The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information. |
CVE-2025-24316 | Medium | 5.3 | 2025-02-28 | The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to unsafe functionalit… |
CVE-2025-23405 | Medium | 5.3 | 2025-02-28 | Unauthenticated log effects metrics gathering incident response efforts and potentially exposes risk of injection attacks (ex log injection). |
CVE-2025-24843 | Medium | 5.1 | 2025-02-28 | Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and… |