PT-2018-8916 · Cybozu · Cybozu Mailwise

Masato Kinugawa · Publicado 2018-06-26 · Atualizado 2018-08-08 · CVE-2018-0558

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cybozu Mailwise versions 5.0.0 through 5.4.1

Description A reflected cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML in the system settings of the affected software via unspecified vectors.

Recommendations For Cybozu Mailwise versions 5.0.0 through 5.4.1, update to a version that contains a fix for this issue, as using earlier versions poses a risk of remote attackers injecting malicious scripts.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-0558

Produtos afetados

Cybozu Mailwise

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-0558 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0558 · Nota de Segurança
• https://support.cybozu.com/ja-jp/article/10193 · Nota
• http://jvn.jp/en/jp/JVN52319657/index.html · Nota