Vulnerabilities

TI-2020-04542 CVE-2020-5572 · GHSA-x672-9c2p-2q54

Information disclosure in Cybozu, Inc. Android App 'Mailwise for Android'

LOW 21

Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00335 Published 2020-05-29 No fix listed CWE-200

TI-2018-00657 CVE-2018-0702 · GHSA-f2f4-hh7p-h89h

Path traversal in Cybozu, Inc. Cybozu Mailwise

LOW 37

Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01947 Published 2019-01-09 No fix listed CWE-22

TI-2018-00516 CVE-2018-0559 · GHSA-5qfj-j9fm-c9q4

Cross-site scripting in Cybozu, Inc. Cybozu Mailwise

LOW 29

Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00796 Published 2018-06-26 No fix listed CWE-79

TI-2018-00515 CVE-2018-0558 · GHSA-r8m9-42x5-r6fp

Cross-site scripting in Cybozu, Inc. Cybozu Mailwise

LOW 29

Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00796 Published 2018-06-26 No fix listed CWE-79

TI-2018-00514 CVE-2018-0557 · GHSA-xfj9-jcw6-8q5m

Cross-site scripting in Cybozu, Inc. Cybozu Mailwise

LOW 29

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00796 Published 2018-06-26 No fix listed CWE-79

TI-2016-04184 CVE-2016-4841 · GHSA-jx5h-5gj9-qx78

Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers.

LOW 23

Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.01481 Published 2017-04-21 No fix listed CWE-20

TI-2016-04187 CVE-2016-4844 · GHSA-3r7r-vmq3-cmvh

Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.

LOW 23

Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.01481 Published 2017-04-20 No fix listed CWE-200

TI-2016-04186 CVE-2016-4843 · GHSA-7g37-8w78-v3jx

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.

LOW 33

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01892 Published 2017-04-20 No fix listed CWE-200

TI-2016-04185 CVE-2016-4842 · GHSA-958x-6cr2-9366

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.

LOW 23

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.01586 Published 2017-04-20 No fix listed CWE-200

TI-2014-04330 CVE-2014-5314 · GHSA-vfm3-6jhx-qh3w

Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4…

MEDIUM 45

Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03742 Published 2014-11-24 No fix listed CWE-119

TI-2013-04119 CVE-2013-4698 · GHSA-235v-4v9j-f2jw

Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive…

LOW 19

Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user's own mai…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00962 Published 2013-08-16 No fix listed CWE-200

TI-2013-02054 CVE-2013-2305 · GHSA-j6xf-r6hg-8fmr

Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x…

LOW 31

Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00643 Published 2013-04-25 No fix listed CWE-352

TI-2011-01174 CVE-2011-1334 · GHSA-gm5p-r38w-vvm6

Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through…

LOW 23

Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2011-06-29 No fix listed CWE-79

TI-2006-04339 CVE-2006-4491 · GHSA-jx5q-w98w-3cqr

Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket…

LOW 22

Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01582 Published 2006-08-31 No fix listed

Vulnerabilities

Filters