VYPR
Medium severity4.3NVD Advisory· Published Apr 17, 2017· Updated Jun 17, 2026

CVE-2016-4868

CVE-2016-4868

Description

Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via specially crafted requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Cybozu/Office17 versions
    cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:10.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:9.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:9.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:9.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:9.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:9.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:9.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*
    • (no CPE)range: 9.0.0 - 10.4.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.