CVE-2013-3646
Last modified
CVE-2013-3646 is a vulnerability of currently unknown severity. The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression.. EPSS estimates a 1.99% chance of exploitation in the next 30 days.
Description
The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cybozu | Cybozu Live | <= 2.0.0 |
| Cybozu | Cybozu Live | 1.0.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-3646?
How severe is CVE-2013-3646?
How do I fix CVE-2013-3646?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-3640Cross-site scripting (XSS) vulnerability in the Instant Web …
- CVE-2013-3641The Pizza Hut Japan Official Order application before 1.1.1.…
- CVE-2013-3642The Angel Browser application 1.47b and earlier for Android …
- CVE-2013-3643The Galapagos Browser application for Android does not prope…
- CVE-2013-3644Unspecified vulnerability in JustSystems Ichitaro 2006 throu…
- CVE-2013-3645Cross-site scripting (XSS) vulnerability in the Orchard.Comm…
- CVE-2013-3647The WebView class in the Cybozu Live application before 2.0.…
- CVE-2013-3648Cross-site scripting (XSS) vulnerability in KENT-WEB POST-MA…
- CVE-2013-3649Cross-site scripting (XSS) vulnerability in KENT-WEB CLIP-MA…
- CVE-2013-3650Directory traversal vulnerability in the lfCheckFileName fun…
- CVE-2013-3651LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers…
- CVE-2013-3652Cross-site scripting (XSS) vulnerability in data/class/pages…
Are you affected by CVE-2013-3646?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST