CVE-2016-4866
17.04.2017, 15:59
Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the Project function.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cybozu | office | 9.0 |
| cybozu | office | 9.1.0 |
| cybozu | office | 9.2.0 |
| cybozu | office | 9.2.1 |
| cybozu | office | 9.3.0 |
| cybozu | office | 9.3.1 |
| cybozu | office | 9.3.2 |
| cybozu | office | 9.9.0 |
| cybozu | office | 10.0.0 |
| cybozu | office | 10.0.1 |
| cybozu | office | 10.0.2 |
| cybozu | office | 10.1.0 |
| cybozu | office | 10.1.2 |
| cybozu | office | 10.2.0 |
| cybozu | office | 10.3.0 |
| cybozu | office | 10.4.0 |
𝑥
= Vulnerable software versions
References