CVE-2022-32453

MEDIUM

Cybozu Office < 10.8.5 - Injection

Title source: rule

Description

HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors.

References (2)

Scores

CVSS v3 6.5
EPSS 0.0018
EPSS Percentile 39.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Classification

CWE
CWE-74
Status published

Affected Products (1)

cybozu/office < 10.8.5

Timeline

Published Aug 18, 2022
Tracked Since Feb 18, 2026