Authentication flaw

Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Cabinet via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows remote attackers to inject an arbitrary script via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors...

Design/Logic Flaw

HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors...

Authentication flaw

Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler...

Authentication flaw

Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-33311

Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified vectors...

CVE-2022-33311

Cybozu Office contains a browse restriction bypass in the Address Book for versions 10.0.0–10.8.5, allowing a remote authenticated attacker to obtain Address Book data via unspecified vectors. The issue is documented across multiple sources (e.g., NVD/JVN/Red Hat) with consistent impact: data dis...

CVE-2022-33151

Cybozu Office (Cybozu, Inc.) has a Cross-site scripting (CWE-79) vulnerability CVE-2022-33151 affecting versions 10.0.0 through 10.8.5. The issue is described as an XSS in specific parameters that can allow a remote attacker to cause arbitrary script execution in a victim’s browser via unspecifie...

CVE-2022-33151

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2022-32583

Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Scheduler via unspecified vectors...

CVE-2022-32583

Summary (CVE-2022-32583) : Cybozu Office versions 10.0.0–10.8.5 contain an operation restriction bypass in the Scheduler component. An authenticated remote attacker can alter Scheduler data via unspecified vectors, potentially affecting scheduled items. The issue is documented across multiple sou...

CVE-2022-32544

Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Project via unspecified vectors...

CVE-2022-32544

CVE-2022-32544 affects Cybozu Office 10.0.0–10.8.5. The issue is an operation restriction bypass in Project that allows a remote authenticated attacker to alter Project data via unspecified vectors. Impact descriptions from multiple sources indicate data modification by logged-in users; no exploi...

CVE-2022-32453

HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors...

CVE-2022-32453

CVE-2022-32453 affects Cybozu Office 10.0.0–10.8.5. The connected documents describe an HTTP header injection vulnerability in Cybozu Office that could allow a remote attacker to obtain and/or alter product data via unspecified vectors. The root cause is an HTTP header injection issue, and the im...

CVE-2022-32283

CVE-2022-32283 affects Cybozu Office (Cabinet component) from version 10.0.0 through 10.8.5. It is described as a browse restriction bypass vulnerability (CWE-284) that allows a remote authenticated attacker to obtain Cabinet data via unspecified vectors. The issue is tied to Cabinet access contr...

CVE-2022-32283

Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Cabinet via unspecified vectors...

CVE-2022-30693

CVE-2022-30693 affects Cybozu Office 10.0.0–10.8.5. The vulnerability is an information-disclosure weakness in the system configuration that allows a remote attacker to obtain data from the product via unspecified vectors. Impact is exposure of product data; certain related entries describe broad...