cybozu office 10.1.2 vulnerabilities and exploits

(subscribe to this query)

3.5

CVSSv2

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated malicious users to inject arbitrary web script or HTML via unspecified vectors.

Cybozu Office 10.5.0 Cybozu Office 10.1.0 Cybozu Office 10.1.2 Cybozu Office 10.2.0 Cybozu Office 10.3.0 Cybozu Office 10.4.0

6.8

CVSSv2

Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 up to and including 10.3.0 allow remote malicious users to hijack the authentication of arbitrary users.

Cybozu Office 10.3.0 Cybozu Office 10.0.1 Cybozu Office 10.0.2 Cybozu Office 10.1.0 Cybozu Office 10.1.2 Cybozu Office 10.0.0 Cybozu Office 10.2.0 Cybozu Office 9.9.0

5.5

CVSSv2

Cybozu Office 9.9.0 up to and including 10.3.0 allows remote authenticated users to bypass intended access restrictions, and read or write to plan data, via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8485, and CVE-2015-8486.

Cybozu Office 10.0.1 Cybozu Office 10.3.0 Cybozu Office 10.0.2 Cybozu Office 10.1.0 Cybozu Office 10.1.2 Cybozu Office 10.2.0 Cybozu Office 10.0.0 Cybozu Office 9.9.0

5.5

CVSSv2

Cybozu Office 9.9.0 up to and including 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary posting titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8486, and CVE-2016-1152.

Cybozu Office 10.0.0 Cybozu Office 10.0.2 Cybozu Office 9.9.0 Cybozu Office 10.1.0 Cybozu Office 10.1.2 Cybozu Office 10.2.0 Cybozu Office 10.3.0 Cybozu Office 10.0.1

5.5

CVSSv2

Cybozu Office 9.9.0 up to and including 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary report titles via unspecified vectors, a different vulnerability than CVE-2015-8484, CVE-2015-8485, and CVE-2016-1152.

Cybozu Office 10.0.0 Cybozu Office 10.0.2 Cybozu Office 9.9.0 Cybozu Office 10.1.0 Cybozu Office 10.1.2 Cybozu Office 10.2.0 Cybozu Office 10.3.0 Cybozu Office 10.0.1

6.8

CVSSv2

customapp in Cybozu Office 9.9.0 up to and including 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) via a crafted CSV file, a different vulnerability than CVE-2016-1153.

Cybozu Office 10.0.0 Cybozu Office 10.2.0 Cybozu Office 9.9.0 Cybozu Office 10.0.1 Cybozu Office 10.0.2 Cybozu Office 10.1.0 Cybozu Office 10.1.2 Cybozu Office 10.3.0

5.5

CVSSv2

Cybozu Office 9.9.0 up to and including 10.3.0 allows remote authenticated users to bypass intended calendar-viewing restrictions via unspecified vectors, a different vulnerability than CVE-2015-8485, CVE-2015-8486, and CVE-2016-1152.

Cybozu Office 10.0.0 Cybozu Office 10.0.2 Cybozu Office 10.1.2 Cybozu Office 10.2.0 Cybozu Office 10.3.0 Cybozu Office 9.9.0 Cybozu Office 10.0.1 Cybozu Office 10.1.0

4

CVSSv2

Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated malicious users to bypass access restriction to obtain "customapp" information via unspecified vectors.

Cybozu Office 10.0.1 Cybozu Office 10.1.0 Cybozu Office 10.2.0 Cybozu Office 10.3.0 Cybozu Office 10.4.0 Cybozu Office 10.5.0 Cybozu Office 10.0.0 Cybozu Office 10.0.2 Cybozu Office 10.1.2

4

CVSSv2

Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated malicious users to bypass access restriction to delete "customapp" templates via unspecified vectors.

Cybozu Office 10.1.2 Cybozu Office 10.2.0 Cybozu Office 10.3.0 Cybozu Office 10.4.0 Cybozu Office 10.0.1 Cybozu Office 10.1.0 Cybozu Office 10.5.0 Cybozu Office 10.0.0 Cybozu Office 10.0.2

4

CVSSv2

Cybozu Office 10.0.0 to 10.6.1 allows authenticated malicious users to bypass access restriction to perform arbitrary actions via "Cabinet" function.

Cybozu Office 10.4.0 Cybozu Office 10.5.0 Cybozu Office 10.6.0 Cybozu Office 10.6.1 Cybozu Office 10.1.2 Cybozu Office 10.3.0 Cybozu Office 10.0.0 Cybozu Office 10.0.1 Cybozu Office 10.0.2 Cybozu Office 10.1.0 Cybozu Office 10.2.0

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook