Read the docs

Cybozu, Inc.

Records332All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high37CVSS 7.0–8.9

Exploited now

Cybozu, Inc. records in CISA KEV

No Cybozu, Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Garoon 198 records MEDIUM Office 71 records MEDIUM Remote Service Manager 22 records MEDIUM Mailwise 14 records MEDIUM Cybozu Office 7 records LOW Dezie 6 records MEDIUM Kunai 6 records MEDIUM Cybozu Live 4 records LOW

Records

6 records in Dezie · all components

TI-2018-00660 CVE-2018-0705 · GHSA-28qc-jxm4-f2f8

Path traversal in Cybozu, Inc. Cybozu Dezie

Priority MEDIUM 43

Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02121 Published 2019-01-09 No fix listed CWE-22
TI-2016-06582 CVE-2016-7833 · GHSA-qghg-p6j3-w7j7

Improper access control in Cybozu, Inc. Cybozu Dezie

Priority LOW 36

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01804 Published 2017-06-09 No fix listed CWE-284
TI-2016-06581 CVE-2016-7832 · GHSA-grvm-3rcr-jpwq

Information disclosure in Cybozu, Inc. Cybozu Dezie

Priority LOW 27

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01706 Published 2017-06-09 No fix listed CWE-200
TI-2011-01174 CVE-2011-1334 · GHSA-gm5p-r38w-vvm6

Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through…

Priority LOW 23

Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2011-06-29 No fix listed CWE-79
Open these records in search →