Cybozu Office

Do you want an email whenever new security vulnerabilities are reported in Cybozu Office?

By the Year

In 2024 there have been 0 vulnerabilities in Cybozu Office . Office did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2024 0 0.00
2023 0 0.00
2022 12 5.17
2021 10 5.32
2020 0 0.00
2019 4 6.45
2018 7 5.10

It may take a day or so for new Office vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Cybozu Office Security Vulnerabilities

Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5

CVE-2022-25986 4.3 - Medium - August 18, 2022

Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler.

Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5

CVE-2022-33311 4.3 - Medium - August 18, 2022

Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified vectors.

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5

CVE-2022-33151 6.1 - Medium - August 18, 2022

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows remote attackers to inject an arbitrary script via unspecified vectors.

XSS

Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5

CVE-2022-32583 4.3 - Medium - August 18, 2022

Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Scheduler via unspecified vectors.

Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5

CVE-2022-32544 4.3 - Medium - August 18, 2022

Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Project via unspecified vectors.

HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may

CVE-2022-32453 6.5 - Medium - August 18, 2022

HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors.

Injection

Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5

CVE-2022-32283 4.3 - Medium - August 18, 2022

Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Cabinet via unspecified vectors.

Information disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8.5

CVE-2022-30693 5.3 - Medium - August 18, 2022

Information disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to obtain the data of the product via unspecified vectors.

Information Disclosure

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5

CVE-2022-30604 6.1 - Medium - August 18, 2022

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.

XSS

Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5

CVE-2022-29891 4.3 - Medium - August 18, 2022

Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Custom App via unspecified vectors.

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5

CVE-2022-29487 6.1 - Medium - August 18, 2022

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.

XSS

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5

CVE-2022-28715 6.1 - Medium - August 18, 2022

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.

XSS

Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4

CVE-2021-20630 4.3 - Medium - March 18, 2021

Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Phone Messages via unspecified vectors.

authentification

Improper access control vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4

CVE-2021-20634 4.3 - Medium - March 18, 2021

Improper access control vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Custom App via unspecified vectors.

authentification

Improper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4

CVE-2021-20633 4.3 - Medium - March 18, 2021

Improper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Cabinet via unspecified vectors.

Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4

CVE-2021-20632 4.3 - Medium - March 18, 2021

Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Bulletin Board via unspecified vectors.

authentification

Improper input validation vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4

CVE-2021-20631 6.5 - Medium - March 18, 2021

Improper input validation vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attacker to alter the data of Custom App via unspecified vectors.

Improper Input Validation

Cross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4

CVE-2021-20629 6.1 - Medium - March 18, 2021

Cross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors.

XSS

Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4

CVE-2021-20627 6.1 - Medium - March 18, 2021

Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors.

XSS

Improper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4

CVE-2021-20626 6.5 - Medium - March 18, 2021

Improper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and alter the data of Workflow via unspecified vectors.

Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4

CVE-2021-20625 4.3 - Medium - March 18, 2021

Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Bulletin Board via unspecified vectors.

Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4

CVE-2021-20624 6.5 - Medium - March 18, 2021

Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors.

Cybozu Office 10.0.0 to 10.8.3

CVE-2019-6023 4.3 - Medium - December 26, 2019

Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to bypass access restriction which may result in obtaining data without access privileges via the application 'Address'.

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3

CVE-2019-6022 6.5 - Medium - December 26, 2019

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to alter arbitrary files via the 'Customapp' function.

Directory traversal

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1

CVE-2018-0704 7.5 - High - January 09, 2019

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen.

Directory traversal

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1

CVE-2018-0703 7.5 - High - January 09, 2019

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests.

Directory traversal

Cybozu Office 10.0.0 to 10.8.0

CVE-2018-0567 6.3 - Medium - June 26, 2018

Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vectors.

Cybozu Office 10.0.0 to 10.8.0

CVE-2018-0566 4.3 - Medium - June 26, 2018

Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass authentication to obtain the schedules without access privilege via unspecified vectors.

Improper Privilege Management

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0

CVE-2018-0565 6.1 - Medium - June 26, 2018

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

XSS

Cybozu Office 10.0.0 to 10.7.0

CVE-2018-0529 4.3 - Medium - June 26, 2018

Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to cause a denial of service via unspecified vectors.

Improper Input Validation

Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules

CVE-2018-0528 4.3 - Medium - June 26, 2018

Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules that are not permitted to access via unspecified vectors.

authentification

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0

CVE-2018-0527 6.1 - Medium - June 26, 2018

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

XSS

Cybozu Office 10.0.0 to 10.7.0

CVE-2018-0526 4.3 - Medium - June 26, 2018

Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors.

Information Disclosure

Cybozu Office 10.0.0 to 10.5.0

CVE-2017-2116 4.3 - Medium - April 28, 2017

Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vectors.

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Cybozu Office or by Cybozu? Click the Watch button to subscribe.

 

Cybozu
Vendor

 

Cybozu Office
Product

subscribe