Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cybozu cybozu office 6 vulnerabilities and exploits

(subscribe to this query)
605
VMScore
CVE-2013-3269
Cross-site request forgery (CSRF) vulnerability in Cybozu Office prior to 8.1.6 and 9.x prior to 9.3.0 allows remote malicious users to hijack the authentication of arbitrary users for requests that change mobile passwords, a different vulnerability than CVE-2013-2305.
Cybozu Cybozu Office 9Cybozu Cybozu Office 9.2.1Cybozu Cybozu OfficeCybozu Cybozu Office 7Cybozu Cybozu Office 6
383
VMScore
CVE-2011-1335
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 prior to 8.1.1 allows remote malicious users to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."
Cybozu Office 6Cybozu Office 7Cybozu Office 8
490
VMScore
CVE-2011-2677
Cybozu Office prior to 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL.
Cybozu Office 6Cybozu Office
605
VMScore
CVE-2013-2305
Cross-site request forgery (CSRF) vulnerability in Cybozu Office prior to 8.1.6 and 9.x prior to 9.3.0, Cybozu Dezie prior to 8.0.7, and Cybozu Mailwise prior to 5.0.4 allows remote malicious users to hijack the authentication of arbitrary users for requests that change passwords...
Cybozu Cybozu Office 7Cybozu Cybozu Office 9Cybozu Cybozu Office 9.2.1Cybozu Cybozu OfficeCybozu Cybozu Office 6Cybozu Cybozu Dezie 8.0.0Cybozu Cybozu Dezie 8.0.4Cybozu Cybozu Dezie 8.0.2Cybozu Cybozu DezieCybozu Cybozu Dezie 8.0.5Cybozu Cybozu Dezie 8.0.3Cybozu Cybozu Dezie 8.0.1Cybozu MailwiseCybozu Mailwise 3.0\\(0.2\\)Cybozu Mailwise 3.0Cybozu Mailwise 2.1Cybozu Mailwise 1.0Cybozu Mailwise 2.0
383
VMScore
CVE-2011-1333
Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 up to and including 2.1.3 allows remote malicious users to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."
Cybozu Garoon 2.1.2Cybozu Garoon 2.0.5Cybozu Garoon 2.0.4Cybozu Garoon 2.1.1Cybozu Garoon 2.0.1Cybozu Garoon 2.0.3Cybozu Garoon 2.0.0Cybozu Garoon 2.1.3Cybozu Garoon 2.0.6Cybozu Garoon 2.1.0Cybozu Garoon 2.0.2Cybozu Office 6
605
VMScore
CVE-2008-6744
Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie prior to 6.0(1.0), and Cybozu Garoon 2.0.0 up to and including 2.1.3 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Cybozu Cybozu Garoon 2.0.0Cybozu Cybozu Garoon 2.1.3Cybozu Cybozu Garoon 2.0.3Cybozu Cybozu Garoon 2.0.2Cybozu Cybozu Garoon 2.0.1Cybozu Cybozu Office 6Cybozu Cybozu Garoon 2.0.5Cybozu Cybozu Garoon 2.0.4Cybozu Cybozu Garoon 2.1.1Cybozu Cybozu Garoon 2.0.6Cybozu Cybozu Garoon 2.1.0Cybozu Cybozu Garoon 2.1.2Cybozu Cybozu Dezie
383
VMScore
CVE-2011-1334
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 up to and including 2.1.3, Cybozu Dezie prior to 6.1, Cybozu MailWise prior to 3.1, and Cybozu Collaborex prior to 1.5 allows remote malicious users to inject arbitrary web script or HTML via vectors...
Cybozu Office 6Cybozu Garoon 2.1.3Cybozu Garoon 2.1.2Cybozu Garoon 2.0.3Cybozu Garoon 2.0.0Cybozu Garoon 2.0.5Cybozu Garoon 2.0.4Cybozu Garoon 2.1.1Cybozu Garoon 2.0.6Cybozu Garoon 2.0.1Cybozu Garoon 2.1.0Cybozu Garoon 2.0.2Cybozu DezieCybozu Dezie 5.1Cybozu Dezie 5.0Cybozu Dezie 3.0Cybozu Dezie 1.0Cybozu Dezie 4.0Cybozu Dezie 2.0Cybozu Mailwise 1.0Cybozu MailwiseCybozu Mailwise 2.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook