Lucene search

JpcertCVE-2016-4873

HistoryApr 17, 2017 - 3:59 p.m.

CVE-2016-4873

2017-04-1715:59:00

CWE-275

jpcert

web.nvd.nist.gov

cybozu office

cve-2016-4873

code execution

security vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

0.002

Percentile

51.4%

JSON

Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to execute unintended operations via the Project function.

Affected configurations

Nvd

Node

cybozuofficeMatch9.0

cybozuofficeMatch9.1.0

cybozuofficeMatch9.2.0

cybozuofficeMatch9.2.1

cybozuofficeMatch9.3.0

cybozuofficeMatch9.3.1

cybozuofficeMatch9.3.2

cybozuofficeMatch9.9.0

cybozuofficeMatch10.0.0

cybozuofficeMatch10.0.1

cybozuofficeMatch10.0.2

cybozuofficeMatch10.1.0

cybozuofficeMatch10.1.2

cybozuofficeMatch10.2.0

cybozuofficeMatch10.3.0

cybozuofficeMatch10.4.0

VendorProductVersionCPE
cybozuoffice9.0cpe:2.3:a:cybozu:office:9.0:*:*:*:*:*:*:*
cybozuoffice9.1.0cpe:2.3:a:cybozu:office:9.1.0:*:*:*:*:*:*:*
cybozuoffice9.2.0cpe:2.3:a:cybozu:office:9.2.0:*:*:*:*:*:*:*
cybozuoffice9.2.1cpe:2.3:a:cybozu:office:9.2.1:*:*:*:*:*:*:*
cybozuoffice9.3.0cpe:2.3:a:cybozu:office:9.3.0:*:*:*:*:*:*:*
cybozuoffice9.3.1cpe:2.3:a:cybozu:office:9.3.1:*:*:*:*:*:*:*
cybozuoffice9.3.2cpe:2.3:a:cybozu:office:9.3.2:*:*:*:*:*:*:*
cybozuoffice9.9.0cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*
cybozuoffice10.0.0cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*
cybozuoffice10.0.1cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cybozu	office	9.0	cpe:2.3:a:cybozu:office:9.0:::::::*
cybozu	office	9.1.0	cpe:2.3:a:cybozu:office:9.1.0:::::::*
cybozu	office	9.2.0	cpe:2.3:a:cybozu:office:9.2.0:::::::*
cybozu	office	9.2.1	cpe:2.3:a:cybozu:office:9.2.1:::::::*
cybozu	office	9.3.0	cpe:2.3:a:cybozu:office:9.3.0:::::::*
cybozu	office	9.3.1	cpe:2.3:a:cybozu:office:9.3.1:::::::*
cybozu	office	9.3.2	cpe:2.3:a:cybozu:office:9.3.2:::::::*
cybozu	office	9.9.0	cpe:2.3:a:cybozu:office:9.9.0:::::::*
cybozu	office	10.0.0	cpe:2.3:a:cybozu:office:10.0.0:::::::*
cybozu	office	10.0.1	cpe:2.3:a:cybozu:office:10.0.1:::::::*

Rows per page:

1-10 of 161

References

jvn.jp/en/jp/JVN07148816/index.html

jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000189.html

www.securityfocus.com/bid/93461

support.cybozu.com/ja-jp/article/9442

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

0.002

Percentile

51.4%

JSON

Related for CVE-2016-4873