VULNERABILITY INTELLIGENCE
CVE-2012-4012
CVSS score4.3 MEDIUM
EPSS probability1.19%
CISA KEVNot currently listed
Published2012-09-08
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
The WebView class in the Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor