CVE-2022-30693

CVE-2022-30693 affects Cybozu Office 10.0.0–10.8.5. The vulnerability is an information-disclosure weakness in the system configuration that allows a remote attacker to obtain data from the product via unspecified vectors. Impact is exposure of product data; certain related entries describe broad...

CVE-2022-30604

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-30604

Cybozu Office is affected by a cross-site scripting vulnerability (CWE-79) in specific parameters, affecting versions 10.0.0–10.8.5. The issue allows a remote attacker to inject arbitrary scripts that execute in a logged-in user’s browser, with exploitation described as via unspecified vectors an...

CVE-2022-29891

CVE-2022-29891 is a Cybozu Office vulnerability describing a browse restriction bypass in the Custom App (Cybozu Office 10.0.0–10.8.5). An authenticated remote attacker could obtain Custom App data via unspecified vectors. Affected: Cybozu Office, Custom App components; root cause: bypass of acce...

CVE-2022-29891

Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Custom App via unspecified vectors...

CVE-2022-29487

CVE-2022-29487 affects Cybozu Office versions 10.0.0–10.8.5. The vulnerability is a cross-site scripting issue that allows a remote attacker to inject arbitrary script through unspecified vectors, potentially enabling script execution in a logged-in user’s browser. Affected product: Cybozu Office...

CVE-2022-29487

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-28715

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-28715

CVE-2022-28715 is a Cross-site scripting vulnerability in Cybozu Office versions 10.0.0–10.8.5. The flaw affects specific parameters and allows a remote attacker to cause arbitrary script execution in a logged-in user’s browser via unspecified vectors (CWE-79). Impact includes the potential for a...

CVE-2022-25986

Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler...

CVE-2022-25986

Summary: CVE-2022-25986 is a browse restriction bypass in the Scheduler of Cybozu Office. Affected versions: Cybozu Office 10.0.0 to 10.8.5. Impact: A remote authenticated attacker may obtain data from the Scheduler due to improper access restrictions in the Scheduler component (data disclosure)....

PT-2022-21386 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: The issue allows a remote authenticated attacker to bypass operation restrictions in the Scheduler component of Cybozu Office, enabling them to alter Scheduler data via unspecified...

PT-2022-17623 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: A browse restriction bypass issue in the Scheduler component allows a remote authenticated attacker to obtain Scheduler data. Recommendations: For Cybozu Office versions 10.0.0 through...

PT-2022-20199 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: The issue allows a remote attacker to inject an arbitrary script via unspecified vectors, exploiting a cross-site scripting vulnerability in specific parameters. Recommendations: For...

PT-2022-19652 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations: For Cybozu Office versions 10.0.0 through 10.8.5, update t...

PT-2022-19897 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: A browse restriction bypass issue in the Custom App of Cybozu Office allows a remote authenticated attacker to obtain Custom App data via unspecified vectors. Recommendations: For Cybo...

PT-2022-19191 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: The issue allows a remote attacker to inject an arbitrary script via unspecified vectors, exploiting a cross-site scripting vulnerability in specific parameters. Recommendations: For...

PT-2022-21328 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: The issue allows a remote attacker to obtain and/or alter the data of the product via unspecified vectors. This is due to an HTTP header injection vulnerability. Recommendations: For...

PT-2022-21359 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: The issue allows a remote authenticated attacker to bypass operation restrictions and alter data in Project via unspecified vectors. Recommendations: For versions 10.0.0 through 10.8.5...

PT-2022-21205 · Cybozu · Cabinet Of Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cabinet of Cybozu Office versions 10.0.0 through 10.8.5 Description: A browse restriction bypass issue allows a remote authenticated attacker to obtain Cabinet data via unspecified vectors. Recommendations: For versions 10.0.0 through 10.8.5,...