CVE-2021-20796

The CVE-2021-20796 entry describes a path-traversal vulnerability in Cybozu Remote Service, affecting Cybozu Remote Service versions 3.1.8 (and related entries up to 3.1.9 for other CVEs). The vulnerability resides in the management screen and allows a remote authenticated attacker to upload an a...

CVE-2021-20795

Cross-site request forgery CSRF vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified vectors...

CVE-2021-20795

CVE-2021-20795 : Cybozu Remote Service has a CSRF vulnerability in the management screen that could allow an attacker to hijack an administrator’s session and perform unintended operations. Affected products are Cybozu Remote Service 3.1.8 to 3.1.9. Remediation per the package advisories is to up...

PT-2021-14259

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.7 through 3.1.9 Description: A cross-site scripting issue exists in the management screen, allowing a remote authenticated attacker to inject an arbitrary script. Recommendations: For Cybozu Remote Service...

PT-2021-14253

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.8 through 3.1.9 Description: A cross-site scripting issue exists in the management screen, allowing a remote authenticated attacker to inject an arbitrary script. Recommendations: For Cybozu Remote Service...

PT-2021-14250

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service version 3.1.8 Description: A directory traversal issue exists in the management screen, allowing a remote authenticated attacker to upload arbitrary files. Recommendations: For Cybozu Remote Service version 3.1.8, update...

PT-2021-14258

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.8 through 3.1.9 Description: The issue allows a remote authenticated attacker to cause a denial of service DoS condition. Recommendations: For Cybozu Remote Service versions 3.1.8 through 3.1.9, update to a...

PT-2021-14252

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.8 through 3.1.9 Description: A cross-site scripting issue exists in the management screen, allowing a remote authenticated attacker to inject an arbitrary script. Recommendations: For Cybozu Remote Service...

PT-2021-14251

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service version 3.1.8 Description: A cross-site script inclusion issue in the management screen allows a remote authenticated attacker to obtain stored product information when using Mozilla Firefox. Recommendations: For Cybozu...

PT-2021-14255

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.8 through 3.1.9 Description: The issue allows a remote authenticated attacker to conduct XML External Entity XXE attacks. This can lead to obtaining the information stored in the product. The attack is...

PT-2021-14257

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.8 through 3.1.9 Description: The issue allows a remote authenticated attacker to bypass operation restrictions in the management screen, enabling them to alter the data of the management screen...

PT-2021-14260

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.0.0 through 3.1.9 Description: The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. The attack vector is not specified. Recommendations: For...

PT-2021-14254

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service version 3.1.8 Description: A cross-site scripting issue exists in the management screen, allowing a remote authenticated attacker to inject an arbitrary script. Recommendations: For Cybozu Remote Service version 3.1.8,...

CVE-2021-20806: URL Redirection to Untrusted Site

Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2021-20805: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20804: Undefined Security Weakness

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of service DoS condition via unspecified vectors...

CVE-2021-20803: Incorrect Authorization

Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen...

CVE-2021-20802: Improper Neutralization of Special Elements in Output Used by a Downstream Component

HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the product...

CVE-2021-20801: Improper Restriction of XML External Entity Reference

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity XXE attacks and obtain the information stored in the product via unspecified vectors. This issue occurs only when using Mozilla Firefox...

CVE-2021-20798: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...