Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150.
References
Link | Resource |
---|---|
http://jvn.jp/en/jp/JVN69278491/index.html | Vendor Advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026 | Vendor Advisory |
https://cs.cybozu.co.jp/2015/006072.html | Vendor Advisory |
https://cs.cybozu.co.jp/2015/006087.html | Vendor Advisory |
https://cs.cybozu.co.jp/2016/006107.html | Vendor Advisory |
https://cs.cybozu.co.jp/2016/006109.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2016-02-17 02:59
Updated : 2024-02-28 15:21
NVD link : CVE-2015-7795
Mitre link : CVE-2015-7795
CVE.ORG link : CVE-2015-7795
JSON object : View
Products Affected
cybozu
- office
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')