Cybozu Mailwise
14 CVEs affecting Cybozu Mailwise. Latest disclosed: 2020-05-29. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0702 | High | 7.5 | 2019-01-09 | Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vectors. |
CVE-2016-4843 | Medium | 6.5 | 2017-04-20 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information. |
CVE-2018-0559 | Medium | 6.1 | 2018-06-26 | Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified v… |
CVE-2018-0558 | Medium | 6.1 | 2018-06-26 | Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settin… |
CVE-2018-0557 | Medium | 6.1 | 2018-06-26 | Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Scre… |
CVE-2020-5572 | Medium | 4.6 | 2020-05-29 | Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors. |
CVE-2016-4841 | Medium | 4.3 | 2017-04-21 | Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers. |
CVE-2016-4844 | Medium | 4.3 | 2017-04-20 | Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks. |
CVE-2016-4842 | Medium | 4.3 | 2017-04-20 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read. |
CVE-2014-5314 | | 2014-11-24 | Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute a… | |
CVE-2013-4698 | | 2013-08-16 | Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstan… | |
CVE-2013-2305 | | 2013-04-25 | Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4… | |
CVE-2011-1334 | | 2011-06-29 | Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu… | |
CVE-2006-4491 | | 2006-08-31 | Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) a… |