CVE-2022-28715: XSS
Published Aug 18, 2022
·Updated
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
Affected Software
1 affected component
Cybozu Office>=10.0.0<=10.8.5
Event History
Aug 18, 2022
CVE Published
via MITRE·07:10 AM
Data Sourced
via MITRE·07:10 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this cross-site scripting vulnerability?
The vulnerability ID for this cross-site scripting vulnerability is CVE-2022-28715.
2
What is the affected software for this vulnerability?
The affected software for this vulnerability is Cybozu Office versions 10.0.0 to 10.8.5.
3
What is the severity rating of CVE-2022-28715?
The severity rating of CVE-2022-28715 is medium with a CVSS score of 6.1.
4
How does the vulnerability in Cybozu Office allow an attacker to inject an arbitrary script?
The vulnerability in Cybozu Office allows a remote attacker to inject an arbitrary script via unspecified vectors.
5
Are there any references available for CVE-2022-28715?
Yes, you can find references for CVE-2022-28715 at the following links: [Reference 1](https://cs.cybozu.co.jp/2022/007584.html), [Reference 2](https://jvn.jp/en/jp/JVN20573662/index.html).