CVE-2022-29487: XSS
Published Aug 18, 2022
·Updated
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
Affected Software
1 affected component
Cybozu Office>=10.0.0<=10.8.5
Event History
Aug 18, 2022
CVE Published
via MITRE·07:11 AM
Data Sourced
via MITRE·07:11 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-29487?
The severity of CVE-2022-29487 is medium.
2
How does CVE-2022-29487 affect Cybozu Office?
CVE-2022-29487 affects Cybozu Office versions 10.0.0 to 10.8.5.
3
How can a remote attacker exploit CVE-2022-29487?
A remote attacker can exploit CVE-2022-29487 by injecting an arbitrary script via unspecified vectors.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-29487?
The CWE ID for CVE-2022-29487 is CWE-79.
5
Are there any references available for CVE-2022-29487?
Yes, you can refer to the following links for more information on CVE-2022-29487: [Link 1](https://cs.cybozu.co.jp/2022/007584.html), [Link 2](https://jvn.jp/en/jp/JVN20573662/index.html).