CVE-2013-3647

MEDIO 6.8CVE-2013-3647 · Published 18/06/2013 · updated 16/06/2026

En resumen

CVE-2013-3647 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a cybozu live (cybozu).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 65.3% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
cybozu live cybozu	`= 1.0.4≤ 2.0.0`	No fix yet

Description

The WebView class in the Cybozu Live application before 2.0.1 for Android allows attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL. NOTE: this vulnerability exists because of a CVE-2012-4009 regression.

References

jvn.jp/en/jp/JVN19740283/index.html
jvndb.jvn.jp/jvndb/JVNDB-2013-000060 · Vendor Advisory
live.cybozu.co.jp/trouble.html · Vendor Advisory

Más vulnerabilidades de cybozu live

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free