Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-1335
cve
2011
1335
cross-site scripting
xss
cybozu office
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.6%
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the “address book and user list functions.”
Affected configurations
Node
cybozuofficeMatch6
ORcybozuofficeMatch7
ORcybozuofficeMatch8
| CPE | Name | Operator | Version |
|---|---|---|---|
| cybozu:office | cybozu office | eq | 6 |
| cybozu:office | cybozu office | eq | 7 |
| cybozu:office | cybozu office | eq | 8 |
Related
nvd
nvd
CVE-2011-1335
2011-06-29 17:55:03
jvn
jvn
JVN#55508059: Cybozu Office vulnerable to cross-site scripting
2011-06-24 00:00:00
openvas
openvas
Cybozu Office 6.x < 8.1.1 Address Book and User List XSS Vulnerabilities
2011-07-05 00:00:00
prion
prion
Cross site scripting
2011-06-29 17:55:00
cvelist
cvelist
CVE-2011-1335
2022-10-03 16:15:09
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.6%
Related for CVE-2011-1335