CVE-2015-8483

EUVD-2015-8364
Open redirect vulnerability in Cybozu Office 10.2.0 through 10.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.4 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
Affected Products (NVD)
VendorProductVersion
cybozuoffice
9.0
cybozuoffice
9.1.0
cybozuoffice
9.2.0
cybozuoffice
9.2.1
cybozuoffice
9.3.0
cybozuoffice
9.3.1
cybozuoffice
9.3.2
cybozuoffice
9.9.0
cybozuoffice
10.0.0
cybozuoffice
10.0.1
cybozuoffice
10.0.2
cybozuoffice
10.1.0
cybozuoffice
10.1.2
cybozuoffice
10.2.0
cybozuoffice
10.3.0
𝑥
= Vulnerable software versions
References
http://jvn.jp/en/jp/JVN71428831/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000025
https://cs.cybozu.co.jp/2015/006088.html
http://jvn.jp/en/jp/JVN71428831/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000025
https://cs.cybozu.co.jp/2015/006088.html