VYPR
Medium severity6.1NVD Advisory· Published Jul 7, 2017· Updated May 13, 2026

CVE-2017-2172

CVE-2017-2172

Description

Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

9
  • Cybozu/Kunai8 versions
    cpe:2.3:a:cybozu:kunai:3.0.0:*:*:*:*:android:*:*+ 7 more
    • cpe:2.3:a:cybozu:kunai:3.0.0:*:*:*:*:android:*:*
    • cpe:2.3:a:cybozu:kunai:3.0.1:*:*:*:*:android:*:*
    • cpe:2.3:a:cybozu:kunai:3.0.2:*:*:*:*:android:*:*
    • cpe:2.3:a:cybozu:kunai:3.0.3:*:*:*:*:android:*:*
    • cpe:2.3:a:cybozu:kunai:3.0.4:*:*:*:*:android:*:*
    • cpe:2.3:a:cybozu:kunai:3.0.5.1:*:*:*:*:android:*:*
    • cpe:2.3:a:cybozu:kunai:3.0.5:*:*:*:*:android:*:*
    • cpe:2.3:a:cybozu:kunai:3.0.6:*:*:*:*:android:*:*
  • Cybozu, Inc./Cybozu KUNAI for Androidv5
    Range: 3.0.0 to 3.0.6

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.