CVE-2021-20797

Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox...

CVE-2021-20795

Cross-site request forgery CSRF vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified vectors...

CVE-2021-20800

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

Cross site scripting

Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox...

CVE-2021-20803

Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen...

CVE-2021-20803

The CVE-2021-20803 entry concerns Cybozu Remote Service. Affected software: Cybozu Remote Service versions 3.1.8 through 3.1.9. Issue: an operation restriction bypass in the management screen enables a remote authenticated attacker to alter data shown in the management interface. Impact is descri...

CVE-2021-20799

CVE-2021-20799 affects Cybozu Remote Service, specifically the management UI in versions 3.1.8 through 3.1.9. A cross-site scripting (XSS) vulnerability allows a remote authenticated attacker to inject arbitrary scripts via unspecified vectors, potentially affecting the logged-in user’s browser s...

CVE-2021-20796

Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors...

PT-2021-14252

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.8 through 3.1.9 Description: A cross-site scripting issue exists in the management screen, allowing a remote authenticated attacker to inject an arbitrary script. Recommendations: For Cybozu Remote Service...

PT-2021-14249

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.8 through 3.1.9 Description: A cross-site request forgery CSRF issue exists in the management screen, allowing a remote attacker to hijack the authentication of administrators. This could lead to unintended...

CVE-2021-20796: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors...

PT-2021-14259

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.7 through 3.1.9 Description: A cross-site scripting issue exists in the management screen, allowing a remote authenticated attacker to inject an arbitrary script. Recommendations: For Cybozu Remote Service...

CVE-2021-20803: Incorrect Authorization

Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen...

PT-2021-14257

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.8 through 3.1.9 Description: The issue allows a remote authenticated attacker to bypass operation restrictions in the management screen, enabling them to alter the data of the management screen...

CVE-2021-20795: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified vectors...

PT-2021-14261

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.0.0 through 3.1.9 Description: A cross-site scripting issue exists in the management screen, allowing a remote attacker to inject an arbitrary script. Recommendations: For Cybozu Remote Service versions 3.0.0...

CVE-2021-20799: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20797: Improper Neutralization of Input During Web Page Generation

Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox...

PT-2021-14253

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.8 through 3.1.9 Description: A cross-site scripting issue exists in the management screen, allowing a remote authenticated attacker to inject an arbitrary script. Recommendations: For Cybozu Remote Service...

PT-2021-14250

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service version 3.1.8 Description: A directory traversal issue exists in the management screen, allowing a remote authenticated attacker to upload arbitrary files. Recommendations: For Cybozu Remote Service version 3.1.8, update...