Vulnerabilities > Cybozu > Remote Service Manager > 3.1.2

DATE CVE VULNERABILITY TITLE RISK
2023-08-03 CVE-2022-26838 Path Traversal vulnerability in Cybozu Remote Service Manager 3.1.2
Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause a denial-of-service (DoS) condition.
network
low complexity
cybozu CWE-22
6.5
2021-10-13 CVE-2021-20806 Open Redirect vulnerability in Cybozu Remote Service Manager
Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
network
cybozu CWE-601
5.8
2021-10-13 CVE-2021-20807 Cross-site Scripting vulnerability in Cybozu Remote Service Manager
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors.
network
cybozu CWE-79
4.3
2019-01-09 CVE-2018-16172 Improper Restriction of Rendered UI Layers or Frames vulnerability in Cybozu Remote Service Manager
Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to delete the registered client certificate.
network
cybozu CWE-1021
5.8
2019-01-09 CVE-2018-16171 Path Traversal vulnerability in Cybozu Remote Service Manager
Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server via unspecified vectors.
6.8
2019-01-09 CVE-2018-16170 Path Traversal vulnerability in Cybozu Remote Service Manager
Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrary files via unspecified vectors.
network
low complexity
cybozu microsoft CWE-22
6.5
2017-04-28 CVE-2016-7815 Improper Certificate Validation vulnerability in Cybozu Remote Service Manager
Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network.
network
cybozu CWE-295
4.9
2015-02-01 CVE-2014-7266 Resource Management Errors vulnerability in Cybozu Remote Service Manager
Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service (CPU consumption) via vectors that trigger colliding hash-table keys.
network
low complexity
cybozu CWE-399
7.8