OF
Product
Office
71
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 60Low 1
Watch
Add Office to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-6023 | 4.3 | Dec 26 | Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to bypass access restriction which may result in obtaining data without access privileges via the application… Affected: 10.0.0 through 10.8.3 |
| CVE-2018-0566 | 4.3 | Jun 26 | Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass authentication to obtain the schedules without access privilege via unspecified vectors Affected: after 10.0.0 through 10.8.0 |
| CVE-2018-0529 | 4.3 | Jun 26 | Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to cause a denial of service via unspecified vectors Affected: 10.0.0 through 10.7.0 |
| CVE-2018-0528 | 4.3 | Jun 26 | Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules that are not permitted to access via unspecified vectors Affected: 10.0.0 through 10.7.0 |
| CVE-2018-0526 | 4.3 | Jun 26 | Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors Affected: 10.0.0 through 10.7.0 |
| CVE-2017-10857 | 4.3 | Oct 12 | Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function Affected: 10.0.0; 10.0.1; 10.0.2; 10.1.0; 10.1.2; 10.2.0; +5 more |
| CVE-2017-2116 | 4.3 | Apr 28 | Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vectors Affected: 10.0.0; 10.0.1; 10.0.2; 10.1.0; 10.1.2; 10.2.0; +3 more |
| CVE-2017-2115 | 4.3 | Apr 28 | Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain "customapp" information via unspecified vectors Affected: 10.0.0; 10.0.1; 10.0.2; 10.1.0; 10.1.2; 10.2.0; +3 more |
| CVE-2016-4873 | 4.3 | Apr 17 | Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to execute unintended operations via the Project function Affected: 9.0; 9.1.0; 9.2.0; 9.2.1; 9.3.0; 9.3.1; +10 more |
| CVE-2016-4872 | 4.3 | Apr 17 | Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions to view the names of unauthorized projects via a breadcrumb trail Affected: 9.0; 9.1.0; 9.2.0; 9.2.1; 9.3.0; 9.3.1; +10 more |
| CVE-2016-4868 | 4.3 | Apr 17 | Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via specially crafted… Affected: 9.0; 9.1.0; 9.2.0; 9.2.1; 9.3.0; 9.3.1; +10 more |
| CVE-2016-4867 | 4.3 | Apr 17 | Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized project information via the Project function Affected: 9.0; 9.1.0; 9.2.0; 9.2.1; 9.3.0; 9.3.1; +10 more |
| CVE-2015-8488 | 4.3 | Feb 17 | Cybozu Office 10.3.0 allows remote attackers to read image files via a crafted e-mail message, a different vulnerability than CVE-2015-8487 Affected: 10.3.0 |
| CVE-2015-8487 | 4.3 | Feb 17 | Cybozu Office 9.0.0 through 10.3 allows remote attackers to discover CSRF tokens via unspecified vectors, a different vulnerability than CVE-2015-8488 Affected: 9.0; 9.1.0; 9.2.0; 9.2.1; 9.3.0; 9.3.1; +9 more |
| CVE-2016-4874 | 3.5 | Apr 17 | Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack Affected: 9.0; 9.1.0; 9.2.0; 9.2.1; 9.3.0; 9.3.1; +10 more |
| CVE-2014-5314 | – | Nov 24 | Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via… Affected: through 10.0.2; 9.0 |
| CVE-2013-4703 | – | Sep 10 | Cross-site scripting (XSS) vulnerability in the top-page customization feature in Cybozu Office before 9.3.1 allows remote attackers to inject arbitrary web script or HTML via… Affected: through 9.3.0 |
| CVE-2011-2677 | – | Oct 21 | Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified… Affected: through 7; 6 |
| CVE-2011-1335 | – | Jun 29 | Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the… Affected: 6; 7; 8 |
| CVE-2011-1334 | – | Jun 29 | Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before… Affected: 6 |
| CVE-2011-1333 | – | Jun 29 | Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors… Affected: 6 |