CVE-2018-0557: Cybozu Mailwise

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors.

Affected products

• Cybozu Mailwise: from 5.0.0, up to and including 5.4.1

Published 2018-06-26. Last modified 2026-06-17.