CVE-2021-20797

CVE-2021-20797 is a cross-site script inclusion vulnerability in the Cybozu Remote Service management UI (CWE-829) affecting Cybozu Remote Service versions around 3.1.8 (and 3.1.9 per related documentation). The issue allows a remote authenticated attacker to obtain information stored in the prod...

CVE-2021-20797

Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox...

CVE-2021-20796

Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors...

CVE-2021-20796

The CVE-2021-20796 entry describes a path-traversal vulnerability in Cybozu Remote Service, affecting Cybozu Remote Service versions 3.1.8 (and related entries up to 3.1.9 for other CVEs). The vulnerability resides in the management screen and allows a remote authenticated attacker to upload an a...

CVE-2021-20795

CVE-2021-20795 : Cybozu Remote Service has a CSRF vulnerability in the management screen that could allow an attacker to hijack an administrator’s session and perform unintended operations. Affected products are Cybozu Remote Service 3.1.8 to 3.1.9. Remediation per the package advisories is to up...

CVE-2021-20795

Cross-site request forgery CSRF vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified vectors...

JVN#52694228: Multiple vulnerabilities in Cybozu Remote Service

Cybozu Remote Service provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-525 Cross-site request forgery vulnerability in the management screen CWE-352 - CVE-2021-20795 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N| Base Score:...

Cybozu Remote Service 注入漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems by Cybozu Japan.Cybozu Remote Service is vulnerable to HTTP header injection. A remote attacker can use this vulnerability to alter information stored in the product...

Cybozu Remote Service 跨站脚本漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a cross-site scripting vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to inject arbitrary scripts...

Cybozu Remote Service 路径遍历漏洞

Cybozu Remote Service is a remote service management software for accessing Cybozu internal systems from Cybozu Japan. A remote authenticated attacker can use this vulnerability to upload arbitrary files...

Cybozu Remote Service 资源管理错误漏洞

A denial of service vulnerability exists in Cybozu Remote Service, a remote service management software used by Cybozu Japan to access Cybozu's internal systems. A remote authentication attacker can exploit this vulnerability to cause a denial of service...

Cybozu Remote Service 跨站脚本漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a cross-site scripting vulnerability exists in the Cybozu Remote Service management interface. A remote attacker can use this vulnerability to inject arbitrary scripts...

Cybozu Remote Service 路径遍历漏洞

Cybozu Remote Service is a remote service management software from Cybozu Japan. It is used to access Cybozu's internal system. A security vulnerability exists in Cybozu Remote Service version 3.1.2. The vulnerability can be exploited by attackers to conduct denial of service attacks...

Cybozu Remote Service 跨站脚本漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a cross-site scripting vulnerability exists in the Cybozu Remote Service management interface. A remote attacker can use this vulnerability to inject arbitrary scripts...

Cybozu Remote Service 跨站脚本漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a cross-site scripting vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to inject arbitrary scripts...

Cybozu Remote Service 跨站脚本漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a cross-site scripting vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to inject arbitrary scripts...

Cybozu Remote Service 代码问题漏洞

An XML external entity injection vulnerability exists in Cybozu Remote Service, a remote service management software used by Cybozu Japan to access Cybozu's internal systems. An attacker could use this vulnerability to obtain information stored in the product...

Cybozu Remote Service 跨站脚本漏洞

Cybozu Remote Service is Cybozu's remote service management software for accessing Cybozu's internal systems. A cross-site scripting vulnerability exists in the Cybozu Remote Service administration interface. A remote authenticated attacker could use this vulnerability to obtain information store...

Cybozu Remote Service 输入验证错误漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems by Cybozu Japan.Cybozu Remote Service is vulnerable to open redirects. The vulnerability can be exploited by remote attackers to redirect users to arbitrary websites and conduct phishing attacks...

Cybozu Remote Service 权限许可和访问控制问题漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a bypass vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to change the data in the management interface...