Vulnerabilities > Cybozu > Low

DATE CVE VULNERABILITY TITLE RISK
2021-08-18 CVE-2021-20761 Improper Input Validation vulnerability in Cybozu Garoon
Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker with an administrative privilege to alter the data of E-mail without the appropriate privilege.
network
low complexity
cybozu CWE-20
2.7
2018-04-16 CVE-2018-0532 Cross-site Scripting vulnerability in Cybozu Garoon
Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors.
network
low complexity
cybozu CWE-79
2.7
2017-04-28 CVE-2017-2109 Information Exposure vulnerability in Cybozu Kunai 3.0.4/3.0.5/3.0.5.1
Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application.
local
high complexity
cybozu CWE-200
2.5
2017-04-17 CVE-2016-4874 Improper Access Control vulnerability in Cybozu Office
Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack.
network
low complexity
cybozu CWE-284
3.5
2016-04-25 CVE-2016-1185 Information Exposure vulnerability in Cybozu Kintone
The Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover an authentication token via a crafted application.
local
high complexity
cybozu CWE-200
2.5