Vendor CVEs

Cybozu

All CVEs

331 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-20796	Cybozu Cybozu Remote Service	Med	0.42	6.5	0.02	Oct 13, 2021	Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors.
CVE-2021-20631	Cybozu Office	Med	0.42	6.5	0.01	Mar 18, 2021	Improper input validation vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attacker to alter the data of Custom App via unspecified vectors.
CVE-2021-20626	Cybozu Office	Med	0.42	6.5	0.01	Mar 18, 2021	Improper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and alter the data of Workflow via unspecified vectors.
CVE-2021-20624	Cybozu Office	Med	0.42	6.5	0.01	Mar 18, 2021	Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors.
CVE-2020-5643	Cybozu Garoon	Med	0.42	6.5	0.02	Nov 6, 2020	Improper input validation vulnerability in Cybozu Garoon 5.0.0 to 5.0.2 allows a remote authenticated attacker to delete some data of the bulletin board via unspecified vector.
CVE-2020-5587	Cybozu Garoon	Med	0.42	6.5	0.01	Jun 30, 2020	Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vectors.
CVE-2020-5583	Cybozu Garoon	Med	0.42	6.5	0.01	Jun 30, 2020	Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors.
CVE-2020-5581	Cybozu Garoon	Med	0.42	6.5	0.02	Jun 30, 2020	Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended information via unspecified vectors.
CVE-2019-6022	Cybozu Office	Med	0.42	6.5	0.02	Dec 26, 2019	Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to alter arbitrary files via the 'Customapp' function.
CVE-2018-16172	Cybozu Cybozu Remote Service	Med	0.42	6.5	0.01	Jan 9, 2019	Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to delete the registered client certificate.
CVE-2016-7802	Cybozu Garoon	Med	0.42	6.5	0.02	Jun 9, 2017	Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors.
CVE-2016-1194	Cybozu Garoon	Med	0.42	6.5	0.02	Apr 21, 2017	Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service.
CVE-2016-4843	Cybozu Mailwise	Med	0.42	6.5	0.02	Apr 20, 2017	Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.
CVE-2016-4871	Cybozu Office	Med	0.42	6.5	0.02	Apr 17, 2017	Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service.
CVE-2016-4869	Cybozu Office	Med	0.42	6.5	0.02	Apr 17, 2017	Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed.
CVE-2016-1190	Cybozu Garoon	Med	0.42	6.5	0.01	Jun 25, 2016	Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors.
CVE-2016-1188	Cybozu Garoon	Med	0.42	6.5	0.01	Jun 25, 2016	Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors.
CVE-2016-1153	Cybozu Office	Med	0.42	6.5	0.01	Feb 17, 2016	customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service via unspecified vectors, a different vulnerability than CVE-2015-8489.
CVE-2015-8489	Cybozu Office	Med	0.42	6.5	0.01	Feb 17, 2016	customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) via a crafted CSV file, a different vulnerability than CVE-2016-1153.
CVE-2018-0567	Cybozu Office	Med	0.41	6.3	0.01	Jun 26, 2018	Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vectors.
CVE-2026-20711	Cybozu Garoon	Med	0.40	6.1	0.00	Feb 2, 2026	Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.
CVE-2022-33151	Cybozu Office	Med	0.40	6.1	0.01	Aug 18, 2022	Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows remote attackers to inject an arbitrary script via unspecified vectors.
CVE-2022-30604	Cybozu Office	Med	0.40	6.1	0.01	Aug 18, 2022	Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2022-29487	Cybozu Office	Med	0.40	6.1	0.01	Aug 18, 2022	Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2022-28715	Cybozu Office	Med	0.40	6.1	0.01	Aug 18, 2022	Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2022-27627	Cybozu Garoon	Med	0.40	6.1	0.01	Jul 4, 2022	Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbitrary script on the logged-in user's web browser.
CVE-2021-20807	Cybozu Cybozu Remote Service	Med	0.40	6.1	0.01	Oct 13, 2021	Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20806	Cybozu Cybozu Remote Service	Med	0.40	6.1	0.01	Oct 13, 2021	Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2021-20771	Cybozu Garoon	Med	0.40	6.1	0.01	Aug 18, 2021	Cross-site scripting vulnerability in some functions of E-Mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20766	Cybozu Garoon	Med	0.40	6.1	0.01	Aug 18, 2021	Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20765	Cybozu Garoon	Med	0.40	6.1	0.01	Aug 18, 2021	Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20629	Cybozu Office	Med	0.40	6.1	0.01	Mar 18, 2021	Cross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors.
CVE-2021-20628	Cybozu Office	Med	0.40	6.1	0.01	Mar 18, 2021	Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors. Note that this vulnerability occurs only when using Mozilla Firefox.
CVE-2021-20627	Cybozu Office	Med	0.40	6.1	0.01	Mar 18, 2021	Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors.
CVE-2020-5568	Cybozu Garoon	Med	0.40	6.1	0.01	Apr 28, 2020	Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web script or HTML via the applications 'Messages' and 'Bulletin Board'.
CVE-2020-5564	Cybozu Garoon	Med	0.40	6.1	0.01	Apr 28, 2020	Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application 'E-mail'.
CVE-2019-5978	Cybozu Garoon	Med	0.40	6.1	0.01	Sep 12, 2019	Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the application 'Scheduler'.
CVE-2019-5946	Cybozu Garoon	Med	0.40	6.1	0.02	May 17, 2019	Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen.
CVE-2019-5940	Cybozu Garoon	Med	0.40	6.1	0.01	May 17, 2019	Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Scheduler'.
CVE-2019-5939	Cybozu Garoon	Med	0.40	6.1	0.01	May 17, 2019	Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'.
CVE-2019-5938	Cybozu Garoon	Med	0.40	6.1	0.01	May 17, 2019	Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'.
CVE-2019-5929	Cybozu Garoon	Med	0.40	6.1	0.01	May 17, 2019	Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the application 'Memo'.
CVE-2019-5928	Cybozu Garoon	Med	0.40	6.1	0.01	May 17, 2019	Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Customize Item function.
CVE-2018-0565	Cybozu Office	Med	0.40	6.1	0.01	Jun 26, 2018	Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2018-0559	Cybozu Mailwise	Med	0.40	6.1	0.01	Jun 26, 2018	Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors.
CVE-2018-0558	Cybozu Mailwise	Med	0.40	6.1	0.01	Jun 26, 2018	Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors.
CVE-2018-0557	Cybozu Mailwise	Med	0.40	6.1	0.01	Jun 26, 2018	Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors.
CVE-2018-0527	Cybozu Office	Med	0.40	6.1	0.01	Jun 26, 2018	Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2017-2257	Cybozu Garoon	Med	0.40	6.1	0.01	Aug 29, 2017	Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function.
CVE-2017-2172	Cybozu Kunai	Med	0.40	6.1	0.01	Jul 7, 2017	Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2021-20796MedOct 13, 2021
Cybozu
Cybozu Remote Service
risk 0.42cvss 6.5epss 0.02
Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors.
CVE-2021-20631MedMar 18, 2021
Cybozu
Office
risk 0.42cvss 6.5epss 0.01
Improper input validation vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attacker to alter the data of Custom App via unspecified vectors.
CVE-2021-20626MedMar 18, 2021
Cybozu
Office
risk 0.42cvss 6.5epss 0.01
Improper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and alter the data of Workflow via unspecified vectors.
CVE-2021-20624MedMar 18, 2021
Cybozu
Office
risk 0.42cvss 6.5epss 0.01
Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors.
CVE-2020-5643MedNov 6, 2020
Cybozu
Garoon
risk 0.42cvss 6.5epss 0.02
Improper input validation vulnerability in Cybozu Garoon 5.0.0 to 5.0.2 allows a remote authenticated attacker to delete some data of the bulletin board via unspecified vector.
CVE-2020-5587MedJun 30, 2020
Cybozu
Garoon
risk 0.42cvss 6.5epss 0.01
Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vectors.
CVE-2020-5583MedJun 30, 2020
Cybozu
Garoon
risk 0.42cvss 6.5epss 0.01
Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors.
CVE-2020-5581MedJun 30, 2020
Cybozu
Garoon
risk 0.42cvss 6.5epss 0.02
Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended information via unspecified vectors.
CVE-2019-6022MedDec 26, 2019
Cybozu
Office
risk 0.42cvss 6.5epss 0.02
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to alter arbitrary files via the 'Customapp' function.
CVE-2018-16172MedJan 9, 2019
Cybozu
Cybozu Remote Service
risk 0.42cvss 6.5epss 0.01
Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to delete the registered client certificate.
CVE-2016-7802MedJun 9, 2017
Cybozu
Garoon
risk 0.42cvss 6.5epss 0.02
Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors.
CVE-2016-1194MedApr 21, 2017
Cybozu
Garoon
risk 0.42cvss 6.5epss 0.02
Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service.
CVE-2016-4843MedApr 20, 2017
Cybozu
Mailwise
risk 0.42cvss 6.5epss 0.02
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.
CVE-2016-4871MedApr 17, 2017
Cybozu
Office
risk 0.42cvss 6.5epss 0.02
Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service.
CVE-2016-4869MedApr 17, 2017
Cybozu
Office
risk 0.42cvss 6.5epss 0.02
Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed.
CVE-2016-1190MedJun 25, 2016
Cybozu
Garoon
risk 0.42cvss 6.5epss 0.01
Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors.
CVE-2016-1188MedJun 25, 2016
Cybozu
Garoon
risk 0.42cvss 6.5epss 0.01
Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors.
CVE-2016-1153MedFeb 17, 2016
Cybozu
Office
risk 0.42cvss 6.5epss 0.01
customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service via unspecified vectors, a different vulnerability than CVE-2015-8489.
CVE-2015-8489MedFeb 17, 2016
Cybozu
Office
risk 0.42cvss 6.5epss 0.01
customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) via a crafted CSV file, a different vulnerability than CVE-2016-1153.
CVE-2018-0567MedJun 26, 2018
Cybozu
Office
risk 0.41cvss 6.3epss 0.01
Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vectors.
CVE-2026-20711MedFeb 2, 2026
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.00
Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.
CVE-2022-33151MedAug 18, 2022
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows remote attackers to inject an arbitrary script via unspecified vectors.
CVE-2022-30604MedAug 18, 2022
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2022-29487MedAug 18, 2022
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2022-28715MedAug 18, 2022
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2022-27627MedJul 4, 2022
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbitrary script on the logged-in user's web browser.
CVE-2021-20807MedOct 13, 2021
Cybozu
Cybozu Remote Service
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20806MedOct 13, 2021
Cybozu
Cybozu Remote Service
risk 0.40cvss 6.1epss 0.01
Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2021-20771MedAug 18, 2021
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in some functions of E-Mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20766MedAug 18, 2021
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20765MedAug 18, 2021
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20629MedMar 18, 2021
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors.
CVE-2021-20628MedMar 18, 2021
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors. Note that this vulnerability occurs only when using Mozilla Firefox.
CVE-2021-20627MedMar 18, 2021
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors.
CVE-2020-5568MedApr 28, 2020
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web script or HTML via the applications 'Messages' and 'Bulletin Board'.
CVE-2020-5564MedApr 28, 2020
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application 'E-mail'.
CVE-2019-5978MedSep 12, 2019
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the application 'Scheduler'.
CVE-2019-5946MedMay 17, 2019
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.02
Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen.
CVE-2019-5940MedMay 17, 2019
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Scheduler'.
CVE-2019-5939MedMay 17, 2019
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'.
CVE-2019-5938MedMay 17, 2019
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'.
CVE-2019-5929MedMay 17, 2019
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the application 'Memo'.
CVE-2019-5928MedMay 17, 2019
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Customize Item function.
CVE-2018-0565MedJun 26, 2018
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2018-0559MedJun 26, 2018
Cybozu
Mailwise
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors.
CVE-2018-0558MedJun 26, 2018
Cybozu
Mailwise
risk 0.40cvss 6.1epss 0.01
Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors.
CVE-2018-0557MedJun 26, 2018
Cybozu
Mailwise
risk 0.40cvss 6.1epss 0.01
Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors.
CVE-2018-0527MedJun 26, 2018
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2017-2257MedAug 29, 2017
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function.
CVE-2017-2172MedJul 7, 2017
Cybozu
Kunai
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Page 2 of 7