Vulnerabilities > Cybozu > Remote Service Manager > 3.0.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-10-13 | CVE-2021-20806 | Open Redirect vulnerability in Cybozu Remote Service Manager Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. | 5.8 |
| 2021-10-13 | CVE-2021-20807 | Cross-site Scripting vulnerability in Cybozu Remote Service Manager Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors. | 4.3 |
| 2019-01-09 | CVE-2018-16172 | Improper Restriction of Rendered UI Layers or Frames vulnerability in Cybozu Remote Service Manager Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to delete the registered client certificate. | 5.8 |
| 2019-01-09 | CVE-2018-16171 | Path Traversal vulnerability in Cybozu Remote Service Manager Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server via unspecified vectors. | 6.8 |
| 2019-01-09 | CVE-2018-16170 | Path Traversal vulnerability in Cybozu Remote Service Manager Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrary files via unspecified vectors. | 6.5 |
| 2019-01-09 | CVE-2018-16169 | Unrestricted Upload of File with Dangerous Type vulnerability in Cybozu Remote Service Manager 3.0.0/3.0.1/3.1.0 Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecified vectors. | 6.5 |
| 2017-04-28 | CVE-2016-7815 | Improper Certificate Validation vulnerability in Cybozu Remote Service Manager Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network. | 4.9 |
| 2014-04-19 | CVE-2014-1984 | Improper Authentication vulnerability in Cybozu Remote Service Manager Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors. | 6.8 |
| 2014-04-19 | CVE-2014-1983 | Denial of Service vulnerability in Cybozu Remote Service Manager Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service (CPU consumption) via unknown vectors. | 7.8 |