CVE-2016-4874

Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.5 LOW
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 46%
VendorProductVersion
cybozuoffice
9.0
cybozuoffice
9.1.0
cybozuoffice
9.2.0
cybozuoffice
9.2.1
cybozuoffice
9.3.0
cybozuoffice
9.3.1
cybozuoffice
9.3.2
cybozuoffice
9.9.0
cybozuoffice
10.0.0
cybozuoffice
10.0.1
cybozuoffice
10.0.2
cybozuoffice
10.1.0
cybozuoffice
10.1.2
cybozuoffice
10.2.0
cybozuoffice
10.3.0
cybozuoffice
10.4.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://jvn.jp/en/jp/JVN11288252/index.html
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000193.html
http://www.securityfocus.com/bid/97719
https://support.cybozu.com/ja-jp/article/9434
http://jvn.jp/en/jp/JVN11288252/index.html
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000193.html
http://www.securityfocus.com/bid/97719
https://support.cybozu.com/ja-jp/article/9434