VULNERABILITY INTELLIGENCE
CVE-2012-4009
CVSS score6.8 MEDIUM
EPSS probability2.00%
CISA KEVNot currently listed
Published2012-08-31
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
The WebView class in the Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')