CVE-2021-20628
CVE-2021-20628
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
18 Mar 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors. Note that this vulnerability occurs only when using Mozilla Firefox.
Affected products
Cybozu, Inc. · Cybozu OfficeWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →