CVE-2018-0557

CVE-2018-0557 affects Cybozu Mailwise versions 5.0.0–5.4.1. The vulnerability is a Stored cross-site scripting (CWE-79) in the E-mail Details Screen, allowing a remote attacker to inject arbitrary web script or HTML via unspecified vectors. Impact is that an arbitrary script may be executed in th...

JVN#52319657: Multiple cross-site scripting vulnerabilities in Cybozu Mailwise

Cybozu Mailwise contains multiple cross-site scripting vulnerabilities below. Stored cross-site scripting vulnerability in "E-mail Details Screen" CWE-79 - CVE-2018-0557 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...