Cybozu
Page 2 of 4 — Cybozu CVEs from a corpus of 330, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-5587 | Medium | 6.5 | 2020-06-30 | Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vectors. |
CVE-2020-5586 | Medium | 4.8 | 2020-06-30 | Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vec… |
CVE-2020-5585 | Medium | 4.8 | 2020-06-30 | Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vect… |
CVE-2020-5584 | High | 7.5 | 2020-06-30 | Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors. |
CVE-2020-5583 | Medium | 6.5 | 2020-06-30 | Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vect… |
CVE-2020-5582 | Medium | 4.3 | 2020-06-30 | Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecifi… |
CVE-2020-5581 | Medium | 6.5 | 2020-06-30 | Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended information via unspecified vectors. |
CVE-2020-5580 | High | 8.1 | 2020-06-30 | Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Single sign-on settings via unspecified ve… |
CVE-2020-5573 | Medium | 4.6 | 2020-05-29 | Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors. |
CVE-2020-5572 | Medium | 4.6 | 2020-05-29 | Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors. |
CVE-2020-5537 | Critical | 9.8 | 2020-05-25 | Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors. |
CVE-2020-5568 | Medium | 6.1 | 2020-04-28 | Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web script or HTML via the applications 'Message… |
CVE-2020-5567 | High | 7.5 | 2020-04-28 | Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in Application Menu. |
CVE-2020-5566 | Medium | 4.3 | 2020-04-28 | Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the application… |
CVE-2020-5565 | Medium | 4.3 | 2020-04-28 | Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's data via the applica… |
CVE-2020-5564 | Medium | 6.1 | 2020-04-28 | Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application 'E-mail'. |
CVE-2020-5563 | Medium | 5.3 | 2020-04-28 | Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the affected product via the API. |
CVE-2020-5562 | Medium | 4.9 | 2020-04-28 | Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege to issue arbitrary H… |
CVE-2019-6023 | Medium | 4.3 | 2019-12-26 | Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to bypass access restriction which may result in obtaining data without access privileges… |
CVE-2019-6022 | Medium | 6.5 | 2019-12-26 | Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to alter arbitrary files via the 'Customapp' function. |
CVE-2019-5991 | High | 7.6 | 2019-09-12 | SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vector… |
CVE-2019-5978 | Medium | 6.1 | 2019-09-12 | Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via… |
CVE-2019-5977 | Medium | 4.3 | 2019-09-12 | Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mai… |
CVE-2019-5976 | Medium | 4.9 | 2019-09-12 | Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via unspecified vectors. |
CVE-2019-5975 | Medium | 5.4 | 2019-09-12 | DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via… |
CVE-2019-5947 | Medium | 5.4 | 2019-05-17 | Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the applic… |
CVE-2019-5946 | Medium | 6.1 | 2019-05-17 | Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via… |
CVE-2019-5945 | Critical | 9.8 | 2019-05-17 | Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authentication of Cybozu Garoon. |
CVE-2019-5944 | Medium | 4.3 | 2019-05-17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the contents of application 'Address' without modify pri… |
CVE-2019-5943 | Medium | 4.3 | 2019-05-17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to view the information without view privileges via the applic… |
CVE-2019-5942 | Medium | 4.3 | 2019-05-17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges via the Multiple Fil… |
CVE-2019-5941 | Medium | 4.3 | 2019-05-17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges via the application… |
CVE-2019-5940 | Medium | 6.1 | 2019-05-17 | Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Schedul… |
CVE-2019-5939 | Medium | 6.1 | 2019-05-17 | Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'. |
CVE-2019-5938 | Medium | 6.1 | 2019-05-17 | Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'. |
CVE-2019-5937 | Medium | 5.4 | 2019-05-17 | Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the user i… |
CVE-2019-5936 | Medium | 5.4 | 2019-05-17 | Directory traversal vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to obtain files without access privileges via the appl… |
CVE-2019-5935 | Medium | 4.3 | 2019-05-17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the I… |
CVE-2019-5934 | High | 7.2 | 2019-05-17 | SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search… |
CVE-2019-5933 | Medium | 4.3 | 2019-05-17 | Cybozu Garoon 4.0.0 to 4.10.0 allows remote authenticated attackers to bypass access restriction to view the Bulletin Board without view privileges via the app… |
CVE-2019-5932 | Medium | 4.8 | 2019-05-17 | Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the applica… |
CVE-2019-5931 | High | 8.7 | 2019-05-17 | Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified vectors. |
CVE-2019-5930 | Medium | 4.3 | 2019-05-17 | Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System'. |
CVE-2019-5929 | Medium | 6.1 | 2019-05-17 | Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the application 'Memo'. |
CVE-2019-5928 | Medium | 6.1 | 2019-05-17 | Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Customize Item function. |
CVE-2018-16178 | High | 7.5 | 2019-01-09 | Cybozu Garoon 3.0.0 to 4.10.0 allows remote attackers to bypass access restriction to view information available only for a sign-on user via Single sign-on fun… |
CVE-2018-16172 | Medium | 6.5 | 2019-01-09 | Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allow… |
CVE-2018-16171 | High | 8.8 | 2019-01-09 | Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server via unspecified vecto… |
CVE-2018-16170 | High | 8.1 | 2019-01-09 | Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrary files via unspeci… |
CVE-2018-16169 | High | 8.8 | 2019-01-09 | Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecified vectors. |
CVE-2018-0705 | Critical | 9.1 | 2019-01-09 | Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests. |
CVE-2018-0704 | High | 7.5 | 2019-01-09 | Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen. |
CVE-2018-0703 | High | 7.5 | 2019-01-09 | Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests. |
CVE-2018-0702 | High | 7.5 | 2019-01-09 | Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vectors. |
CVE-2018-0673 | High | 8.1 | 2018-11-15 | Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors. |
CVE-2018-0607 | High | 8.8 | 2018-07-26 | SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL… |
CVE-2018-0567 | Medium | 6.3 | 2018-06-26 | Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vectors. |
CVE-2018-0566 | Medium | 4.3 | 2018-06-26 | Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass authentication to obtain the schedules without access privilege via unspecified vectors. |
CVE-2018-0565 | Medium | 6.1 | 2018-06-26 | Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2018-0559 | Medium | 6.1 | 2018-06-26 | Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified v… |
CVE-2018-0558 | Medium | 6.1 | 2018-06-26 | Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settin… |
CVE-2018-0557 | Medium | 6.1 | 2018-06-26 | Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Scre… |
CVE-2018-0529 | Medium | 4.3 | 2018-06-26 | Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to cause a denial of service via unspecified vectors. |
CVE-2018-0528 | Medium | 4.3 | 2018-06-26 | Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules that are not permitted to access via unspecified v… |
CVE-2018-0527 | Medium | 6.1 | 2018-06-26 | Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2018-0526 | Medium | 4.3 | 2018-06-26 | Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors. |
CVE-2018-0551 | Medium | 5.4 | 2018-04-16 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified… |
CVE-2018-0550 | Medium | 4.3 | 2018-04-16 | Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors. |
CVE-2018-0549 | Medium | 5.4 | 2018-04-16 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified… |
CVE-2018-0548 | Medium | 4.3 | 2018-04-16 | Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unspecified vectors. |
CVE-2018-0533 | Medium | 4.9 | 2018-04-16 | Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified… |
CVE-2018-0532 | Low | 2.7 | 2018-04-16 | Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified… |
CVE-2018-0531 | Medium | 4.3 | 2018-04-16 | Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a folder and/or notific… |
CVE-2018-0530 | High | 8.8 | 2018-04-16 | SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. |
CVE-2017-10857 | Medium | 4.3 | 2017-10-12 | Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function. |
CVE-2017-2258 | Medium | 4.3 | 2017-08-29 | Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications". |
CVE-2017-2257 | Medium | 6.1 | 2017-08-29 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function. |
CVE-2017-2256 | Medium | 5.4 | 2017-08-29 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the ap… |
CVE-2017-2255 | Medium | 5.4 | 2017-08-29 | Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the ap… |
CVE-2017-2254 | Medium | 4.9 | 2017-08-29 | Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input |
CVE-2017-2172 | Medium | 6.1 | 2017-07-07 | Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified ve… |
CVE-2017-2146 | Medium | 4.8 | 2017-07-07 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu. |
CVE-2017-2145 | Medium | 5.4 | 2017-07-07 | Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors. |
CVE-2017-2144 | Medium | 5.4 | 2017-07-07 | Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page. |
CVE-2016-7833 | High | 7.5 | 2017-06-09 | Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file via unspeci… |
CVE-2016-7832 | Medium | 5.3 | 2017-06-09 | Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file via unspeci… |
CVE-2016-7816 | Medium | 5.9 | 2017-06-09 | The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… |
CVE-2016-7803 | High | 8.8 | 2017-06-09 | SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiReport" funct… |
CVE-2016-7802 | Medium | 6.5 | 2017-06-09 | Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors. |
CVE-2016-7801 | Medium | 4.3 | 2017-06-09 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors. |
CVE-2016-4910 | Medium | 4.3 | 2017-06-09 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operational administrators' MultiReport filters… |
CVE-2016-4909 | Medium | 4.3 | 2017-06-09 | Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the authentication of a logged in user to for… |
CVE-2016-4908 | Medium | 4.3 | 2017-06-09 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unsp… |
CVE-2016-4907 | High | 8.8 | 2017-06-09 | Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors. |
CVE-2016-4906 | Medium | 6.1 | 2017-06-09 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cy… |
CVE-2017-2116 | Medium | 4.3 | 2017-04-28 | Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vectors. |
CVE-2017-2115 | Medium | 4.3 | 2017-04-28 | Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain "customapp" information via unspecified vectors. |
CVE-2017-2114 | Medium | 5.4 | 2017-04-28 | Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecifi… |
CVE-2017-2109 | Low | 2.5 | 2017-04-28 | Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application. |
CVE-2017-2095 | Medium | 4.3 | 2017-04-28 | Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of m… |