Description
Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://support.cybozu.com/ja-jp/article/9909
Third Party Advisory third-party-advisory
x_refsource_jvn
https://jvn.jp/en/jp/JVN56588965/index.html
Scores
CVSS v3
6.1
EPSS
0.0026
EPSS Percentile
49.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (9)
cybozu/kunai
3.0.0
cybozu/kunai
3.0.1
cybozu/kunai
3.0.2
cybozu/kunai
3.0.3
cybozu/kunai
3.0.4
cybozu/kunai
3.0.5
cybozu/kunai
3.0.5.1
cybozu/kunai
3.0.6
Cybozu, Inc./Cybozu KUNAI for Android
3.0.0 to 3.0.6
Published
Jul 07, 2017
Tracked Since
Feb 18, 2026