CVE-2015-7798

Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2016-1149, and CVE-2016-1150.

• CWE-79

• http://jvn.jp/en/jp/JVN69278491/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026Vendor Advisory
• https://cs.cybozu.co.jp/2015/006072.htmlVendor Advisory
• https://cs.cybozu.co.jp/2015/006087.htmlVendor Advisory
• https://cs.cybozu.co.jp/2016/006107.htmlVendor Advisory
• https://cs.cybozu.co.jp/2016/006109.htmlVendor Advisory
• http://jvn.jp/en/jp/JVN69278491/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000026Vendor Advisory
• https://cs.cybozu.co.jp/2015/006072.htmlVendor Advisory
• https://cs.cybozu.co.jp/2015/006087.htmlVendor Advisory
• https://cs.cybozu.co.jp/2016/006107.htmlVendor Advisory
• https://cs.cybozu.co.jp/2016/006109.htmlVendor Advisory

Published

Feb 17, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7792Corega CG-WLBARGS devices allow remote attackers to perform …
• CVE-2015-7793Corega CG-WLBARAGM devices provide an open proxy service, wh…
• CVE-2015-7794Corega CG-WLNCM4G devices provide an open DNS resolver, whic…
• CVE-2015-7795Cross-site scripting (XSS) vulnerability in Cybozu Office 9.…
• CVE-2015-7796Cross-site scripting (XSS) vulnerability in Cybozu Office 9.…
• CVE-2015-7797Cross-site scripting (XSS) vulnerability in Cybozu Office 9.…
• CVE-2015-7799The slhc_init function in drivers/net/slip/slhc.c in the Lin…
• CVE-2015-7800Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7801Use-after-free vulnerability in OptiPNG 0.6.4 allows remote …
• CVE-2015-7802gifread.c in gif2png, as used in OptiPNG before 0.7.6, allow…
• CVE-2015-7803The phar_get_entry_data function in ext/phar/util.c in PHP b…
• CVE-2015-7804Off-by-one error in the phar_parse_zipfile function in ext/p…