Sign in Get started

← All advisories

Medium severity6.5NVD Advisory· Published Apr 17, 2017· Updated May 13, 2026

CVE-2016-4869

CVE-2016-4869

Description

Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed.

Affected products

16

Cybozu/Office16 versions
cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*+ 15 more
- cpe:2.3:a:cybozu:office:10.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:10.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:10.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:10.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:10.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:10.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:10.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:10.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:9.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:9.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:9.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:9.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:9.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:9.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:office:9.9.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

jvn.jp/en/jp/JVN09736331/index.htmlnvdThird Party AdvisoryVDB Entry
jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000191.htmlnvdThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/97715nvdThird Party AdvisoryVDB Entry
support.cybozu.com/ja-jp/article/9428nvdVendor Advisory

News mentions

0

No linked articles in our index yet.