What’s Vulnerable › Vulnerabilities

CVE-2012-4012

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-09-08 · updated 2026-06-16
• Weakness: CWE-200

Description

The WebView class in the Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL.

Affected products

• Cybozu, Inc. Cybozu KUNAI for Android: through 2.0.5

References

• http://cs.cybozu.co.jp/information/20120910up02.php
• http://jvn.jp/en/jp/JVN59652356/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000084
• http://cs.cybozu.co.jp/information/20120910up02.php
• http://jvn.jp/en/jp/JVN59652356/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000084

Get alerted when CVE-2012-4012 or the next vulnerability affects your stack