Mailwise Security Vulnerabilities and Issues — Mailwise CVE List

Lucene search

CybozuMailwise

5 matches found

CVE•added 2018/06/26 2:29 p.m.•49 views

CVE-2018-0558

Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors.

6.1CVSS5.9AI score0.00238EPSS

CVE•added 2013/04/25 10:55 a.m.•38 views

CVE-2013-2305

Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords.

6.8CVSS7.3AI score0.00142EPSS

CVE•added 2017/04/20 6:59 p.m.•36 views

CVE-2016-4843

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.

6.5CVSS6.4AI score0.00932EPSS

CVE•added 2018/06/26 2:29 p.m.•35 views

CVE-2018-0557

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors.

6.1CVSS5.8AI score0.00238EPSS

CVE•added 2018/06/26 2:29 p.m.•33 views

CVE-2018-0559

Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors.

6.1CVSS6AI score0.00238EPSS