Cybozu Office
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Cybozu Office.
EOL Dates
Ensure that you are using a supported version of Cybozu Office. Here are some end of life, and end of support dates for Cybozu Office.
| Release | EOL | End of Support | Status |
|---|---|---|---|
| 2024 | October 9, 2029 | October 9, 2029 |
Active
Cybozu Office 2024 will become EOL in 3 years (in 2029). |
| 2024-ltsc | October 9, 2029 | October 9, 2029 |
Active
Cybozu Office 2024-ltsc will become EOL in 3 years (in 2029). |
| 2021 | October 13, 2026 | October 13, 2026 |
EOL This Year
Cybozu Office 2021 will become EOL this year, in October 2026. |
| 2019 | October 14, 2025 | October 10, 2023 |
EOL
Cybozu Office 2019 became EOL in 2025 and supported ended in 2023 |
| 2016 | October 14, 2025 | October 13, 2020 |
EOL
Cybozu Office 2016 became EOL in 2025 and supported ended in 2020 |
| 365 | - | - |
Active
|
| 2013 | April 11, 2023 | April 10, 2018 |
EOL
Cybozu Office 2013 became EOL in 2023 and supported ended in 2018 |
| 2011-for-mac | October 10, 2017 | October 10, 2017 |
EOL
Cybozu Office 2011-for-mac became EOL in 2017 and supported ended in 2017 |
| 2010 | October 13, 2020 | October 13, 2015 |
EOL
Cybozu Office 2010 became EOL in 2020 and supported ended in 2015 |
| 2008-for-mac | April 9, 2013 | April 9, 2013 |
EOL
Cybozu Office 2008-for-mac became EOL in 2013 and supported ended in 2013 |
| 2007 | October 10, 2017 | October 9, 2012 |
EOL
Cybozu Office 2007 became EOL in 2017 and supported ended in 2012 |
By the Year
In 2026 there have been 0 vulnerabilities in Cybozu Office. Office did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 1 | 6.50 |
| 2023 | 0 | 0.00 |
| 2022 | 12 | 5.17 |
| 2021 | 11 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 4 | 5.40 |
| 2018 | 7 | 5.10 |
It may take a day or so for new Office vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Cybozu Office Security Vulnerabilities
Cybozu Office 10.0.0-10.8.6 Sensitive Info Leak via Custom App Search
CVE-2024-39817
6.5 - Medium
- August 06, 2024
Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.
Browse Restriction Bypass in Cybozu Office Scheduler 10.0-10.8.5
CVE-2022-25986
4.3 - Medium
- August 18, 2022
Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler.
XSS in Cybozu Office 10.0.0-10.8.5 via Specific Parameters
CVE-2022-28715
6.1 - Medium
- August 18, 2022
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
XSS
XSS in Cybozu Office 10.0.0-10.8.5 via unspecified vectors
CVE-2022-29487
6.1 - Medium
- August 18, 2022
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
XSS
Cybozu Office 10-10.8.5 Custom App BR Bypass
CVE-2022-29891
4.3 - Medium
- August 18, 2022
Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Custom App via unspecified vectors.
Cybozu Office XSS via parameters 10.0.0-10.8.5
CVE-2022-30604
6.1 - Medium
- August 18, 2022
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
XSS
Cybozu Office 10.0.010.8.5 Info Disclosure via System Config
CVE-2022-30693
5.3 - Medium
- August 18, 2022
Information disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to obtain the data of the product via unspecified vectors.
Information Disclosure
Cybozu Office Cabinet Bypass of Browse Restrictions (v10.0.010.8.5)
CVE-2022-32283
4.3 - Medium
- August 18, 2022
Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Cabinet via unspecified vectors.
HTTP Header Injection in Cybozu Office 10.0.0-10.8.5
CVE-2022-32453
6.5 - Medium
- August 18, 2022
HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors.
Injection
CVE-2022-32544: Cybozu Office 10.x Project OpReg Bypass for Data Alteration
CVE-2022-32544
4.3 - Medium
- August 18, 2022
Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Project via unspecified vectors.
OPA-Bypass: Remote Scheduler Data Alteration in Cybozu Office 10.0.0-10.8.5
CVE-2022-32583
4.3 - Medium
- August 18, 2022
Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Scheduler via unspecified vectors.
Cybozu Office <=10.8.5 Remote XSS via Parameters
CVE-2022-33151
6.1 - Medium
- August 18, 2022
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows remote attackers to inject an arbitrary script via unspecified vectors.
XSS
CVE-2022-33311: AddressBook Bypass in Cybozu Office <10.8.5
CVE-2022-33311
4.3 - Medium
- August 18, 2022
Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified vectors.
Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4
CVE-2021-20632
- March 18, 2021
Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Bulletin Board via unspecified vectors.
Improper input validation vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4
CVE-2021-20631
- March 18, 2021
Improper input validation vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attacker to alter the data of Custom App via unspecified vectors.
Improper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4
CVE-2021-20633
- March 18, 2021
Improper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Cabinet via unspecified vectors.
Improper access control vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4
CVE-2021-20634
- March 18, 2021
Improper access control vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Custom App via unspecified vectors.
Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4
CVE-2021-20628
- March 18, 2021
Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors. Note that this vulnerability occurs only when using Mozilla Firefox.
Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4
CVE-2021-20630
- March 18, 2021
Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Phone Messages via unspecified vectors.
Cross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4
CVE-2021-20629
- March 18, 2021
Cross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors.
Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4
CVE-2021-20627
- March 18, 2021
Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors.
Improper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4
CVE-2021-20626
- March 18, 2021
Improper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and alter the data of Workflow via unspecified vectors.
Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4
CVE-2021-20625
- March 18, 2021
Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Bulletin Board via unspecified vectors.
Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4
CVE-2021-20624
- March 18, 2021
Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors.
Cybozu Office 10.0.0 to 10.8.3
CVE-2019-6023
4.3 - Medium
- December 26, 2019
Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to bypass access restriction which may result in obtaining data without access privileges via the application 'Address'.
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3
CVE-2019-6022
6.5 - Medium
- December 26, 2019
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to alter arbitrary files via the 'Customapp' function.
Directory traversal
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1
CVE-2018-0704
- January 09, 2019
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen.
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1
CVE-2018-0703
- January 09, 2019
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests.
Cybozu Office 10.0.0 to 10.8.0
CVE-2018-0567
6.3 - Medium
- June 26, 2018
Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vectors.
Cybozu Office 10.0.0 to 10.8.0
CVE-2018-0566
4.3 - Medium
- June 26, 2018
Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass authentication to obtain the schedules without access privilege via unspecified vectors.
Improper Privilege Management
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0
CVE-2018-0565
6.1 - Medium
- June 26, 2018
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
XSS
Cybozu Office 10.0.0 to 10.7.0
CVE-2018-0529
4.3 - Medium
- June 26, 2018
Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to cause a denial of service via unspecified vectors.
Improper Input Validation
Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules
CVE-2018-0528
4.3 - Medium
- June 26, 2018
Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules that are not permitted to access via unspecified vectors.
authentification
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0
CVE-2018-0527
6.1 - Medium
- June 26, 2018
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
XSS
Cybozu Office 10.0.0 to 10.7.0
CVE-2018-0526
4.3 - Medium
- June 26, 2018
Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors.
Information Disclosure
Cybozu Office 10.0.0 to 10.5.0
CVE-2017-2116
4.3 - Medium
- April 28, 2017
Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vectors.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Cybozu Office or by Cybozu? Click the Watch button to subscribe.
