What’s Vulnerable › Vulnerabilities

CVE-2013-3647

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-06-18 · updated 2026-06-16
• Weakness: CWE-200

Description

The WebView class in the Cybozu Live application before 2.0.1 for Android allows attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL. NOTE: this vulnerability exists because of a CVE-2012-4009 regression.

Affected products

• Cybozu Live: through 2.0.0; 1.0.4

References

• http://jvn.jp/en/jp/JVN19740283/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000060
• https://live.cybozu.co.jp/trouble.html?q=2530
• http://jvn.jp/en/jp/JVN19740283/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000060
• https://live.cybozu.co.jp/trouble.html?q=2530

Get alerted when CVE-2013-3647 or the next vulnerability affects your stack