CVE-2021-20628

2021-03-1800:55:59

jpcert

www.cve.org

cybozu office

xss

address book

mozilla firefox

EPSS

0.001

Percentile

47.1%

JSON

Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors. Note that this vulnerability occurs only when using Mozilla Firefox.

CNA Affected

[
  {
    "product": "Cybozu Office",
    "vendor": "Cybozu, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0 to 10.8.4"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN45797538/index.html

kb.cybozu.support/article/36868/

EPSS

0.001

Percentile

47.1%

JSON

Related for CVELIST:CVE-2021-20628