RS
Product
Remote Service Manager
22
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 15Low 0
Watch
Add Remote Service Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20795 | 8.8 | Oct 13 | Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of… Affected: 3.1.8; 3.1.9 |
| CVE-2018-16171 | 8.8 | Jan 9 | Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server via unspecified vectors Affected: 3.0.0 through 3.1.8 |
| CVE-2018-16169 | 8.8 | Jan 9 | Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecified vectors Affected: 3.0.0 through 3.1.0 |
| CVE-2018-16170 | 8.1 | Jan 9 | Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrary files via unspecified vectors Affected: 3.0.0 through 3.1.8 |
| CVE-2022-26838 | 6.5 | Aug 3 | Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause a denial-of-service (DoS) condition Affected: 3.1.2 |
| CVE-2021-20804 | 6.5 | Oct 13 | Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of service (DoS) condition via unspecified vectors Affected: 3.1.8; 3.1.9 |
| CVE-2021-20801 | 6.5 | Oct 13 | Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity (XXE) attacks and obtain the information stored in the product via… Affected: 3.1.8; 3.1.9 |
| CVE-2021-20796 | 6.5 | Oct 13 | Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified… Affected: 3.1.8 |
| CVE-2018-16172 | 6.5 | Jan 9 | Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers… Affected: 3.0.0 through 3.1.8 |
| CVE-2021-20807 | 6.1 | Oct 13 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors Affected: 3.0.0 through 3.1.9 |
| CVE-2021-20806 | 6.1 | Oct 13 | Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified… Affected: 3.0.0 through 3.1.9 |
| CVE-2021-20805 | 5.4 | Oct 13 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via… Affected: 3.1.7 through 3.1.9 |
| CVE-2021-20803 | 5.4 | Oct 13 | Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen Affected: 3.1.8; 3.1.9 |
| CVE-2021-20800 | 5.4 | Oct 13 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified… Affected: 3.1.8 |
| CVE-2021-20799 | 5.4 | Oct 13 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via… Affected: 3.1.8; 3.1.9 |
| CVE-2021-20798 | 5.4 | Oct 13 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via… Affected: 3.1.8; 3.1.9 |
| CVE-2021-20797 | 5.4 | Oct 13 | Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the… Affected: 3.1.8 |
| CVE-2021-20802 | 5.3 | Oct 13 | HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the product Affected: 3.1.8; 3.1.9 |
| CVE-2016-7815 | 4.2 | Apr 28 | Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network Affected: 3.0.0; 3.0.1; 3.1.0; 3.1.1; 3.1.2; 3.1.3; +1 more |
| CVE-2014-7266 | – | Feb 1 | Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service (CPU consumption)… Affected: 2.3.0; 3.1.0; 3.1.1; 3.1.2 |
| CVE-2014-1984 | – | Apr 19 | Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via… Affected: through 2.3.0; 3.0.0 through 3.1.0 |
| CVE-2014-1983 | – | Apr 19 | Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service (CPU consumption) via unknown… Affected: through 2.3.0; 3.0.0 through 3.1.0 |
Showing 22