CVE-2013-3646

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-06-18 · updated 2026-06-16
Weakness: CWE-17

Description

The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression.

Affected products

Cybozu Live: through 2.0.0; 1.0.4

References

http://jvn.jp/en/jp/JVN63428218/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000059
https://live.cybozu.co.jp/trouble.html?q=2530
http://jvn.jp/en/jp/JVN63428218/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000059
https://live.cybozu.co.jp/trouble.html?q=2530

Get alerted when CVE-2013-3646 or the next vulnerability affects your stack