OF
Product
Office
71
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 60Low 1
Watch
Add Office to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0526 | 4.3 | Jun 26 | Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors Affected: 10.0.0 through 10.7.0 |
| CVE-2017-10857 | 4.3 | Oct 12 | Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function Affected: 10.0.0; 10.0.1; 10.0.2; 10.1.0; 10.1.2; 10.2.0; +5 more |
| CVE-2017-2116 | 4.3 | Apr 28 | Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vectors Affected: 10.0.0; 10.0.1; 10.0.2; 10.1.0; 10.1.2; 10.2.0; +3 more |
| CVE-2017-2115 | 4.3 | Apr 28 | Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain "customapp" information via unspecified vectors Affected: 10.0.0; 10.0.1; 10.0.2; 10.1.0; 10.1.2; 10.2.0; +3 more |
| CVE-2016-4873 | 4.3 | Apr 17 | Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to execute unintended operations via the Project function Affected: 9.0; 9.1.0; 9.2.0; 9.2.1; 9.3.0; 9.3.1; +10 more |
| CVE-2016-4872 | 4.3 | Apr 17 | Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions to view the names of unauthorized projects via a breadcrumb trail Affected: 9.0; 9.1.0; 9.2.0; 9.2.1; 9.3.0; 9.3.1; +10 more |
| CVE-2016-4868 | 4.3 | Apr 17 | Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via specially crafted… Affected: 9.0; 9.1.0; 9.2.0; 9.2.1; 9.3.0; 9.3.1; +10 more |
| CVE-2016-4867 | 4.3 | Apr 17 | Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized project information via the Project function Affected: 9.0; 9.1.0; 9.2.0; 9.2.1; 9.3.0; 9.3.1; +10 more |
| CVE-2015-8488 | 4.3 | Feb 17 | Cybozu Office 10.3.0 allows remote attackers to read image files via a crafted e-mail message, a different vulnerability than CVE-2015-8487 Affected: 10.3.0 |
| CVE-2015-8487 | 4.3 | Feb 17 | Cybozu Office 9.0.0 through 10.3 allows remote attackers to discover CSRF tokens via unspecified vectors, a different vulnerability than CVE-2015-8488 Affected: 9.0; 9.1.0; 9.2.0; 9.2.1; 9.3.0; 9.3.1; +9 more |