Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack.Referenceshttp://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000193.htmlhttps://support.cybozu.com/ja-jp/article/9434http://jvn.jp/en/jp/JVN11288252/index.htmlhttp://www.securityfocus.com/bid/97719