CVE-2017-2172: XSS
Published Jul 7, 2017
·Updated
Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
8 affected components
Cybozu Kunai Android=3.0.0
Cybozu Kunai Android=3.0.1
Cybozu Kunai Android=3.0.2
Cybozu Kunai Android=3.0.3
Cybozu Kunai Android=3.0.4
Cybozu Kunai Android=3.0.5
Cybozu Kunai Android=3.0.5.1
Cybozu Kunai Android=3.0.6
Event History
Jul 7, 2017
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-2172?
CVE-2017-2172 is categorized with a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2017-2172?
To fix CVE-2017-2172, update Cybozu KUNAI to version 3.0.7 or later.
3
What types of attacks are possible with CVE-2017-2172?
CVE-2017-2172 allows remote attackers to inject arbitrary web scripts or HTML, enabling various malicious activities.
4
Which versions of Cybozu KUNAI are affected by CVE-2017-2172?
CVE-2017-2172 affects Cybozu KUNAI versions 3.0.0 through 3.0.6.
5
Who discovered CVE-2017-2172?
CVE-2017-2172 was reported on public vulnerability databases highlighting its impact on user security.