CVE-2016-4874

Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a “reflected file download” attack.