Known vulnerabilities in Cybozu Office

Vendor: Cybozu
Software: Cybozu Office
Software CPE: cpe:2.3:a:cybozu:cybozu_office:*:*:*:*:*:*:*:*
Website: https://cybozu-global.com/
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cybozu Office Cybozu Office is affected by 25 known vulnerabilities: 3 medium, 22 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65543 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-29487		 CWE-79 Low
No
No
 10.8.6 20.07.2022 SB2022072089
#VU65542 - Improper Access Control
CVE-2022-33311		 CWE-284 Low
No
No
 10.8.6 20.07.2022 SB2022072089
#VU65541 - Improper Access Control
CVE-2022-25986		 CWE-284 Low
No
No
 10.8.6 20.07.2022 SB2022072089
#VU65540 - Improper Authorization
CVE-2022-32583		 CWE-285 Low
No
No
 10.8.6 20.07.2022 SB2022072089
#VU65539 - Exposure of sensitive information to an unauthorized actor
CVE-2022-30693		 CWE-200 Medium
No
No
 10.8.6 20.07.2022 SB2022072089
#VU65538 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-32453		 CWE-113 Medium
No
No
 10.8.6 20.07.2022 SB2022072089
#VU65537 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-30604		 CWE-79 Low
No
No
 10.8.6 20.07.2022 SB2022072089
#VU65536 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-28715		 CWE-79 Low
No
No
 10.8.6 20.07.2022 SB2022072089
#VU65535 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-33151		 CWE-79 Low
No
No
 10.8.6 20.07.2022 SB2022072089
#VU65534 - Improper Access Control
CVE-2022-29891		 CWE-284 Low
No
No
 10.8.6 20.07.2022 SB2022072089
#VU65533 - Improper Authorization
CVE-2022-32544		 CWE-285 Low
No
No
 10.8.6 20.07.2022 SB2022072089
#VU65532 - Improper Access Control
CVE-2022-32283		 CWE-284 Low
No
No
 10.8.6 20.07.2022 SB2022072089
#VU51469 - Permissions, Privileges, and Access Controls
CVE-2021-20634		 CWE-264 Low
No
No
 10.8.5 15.03.2021 SB2021031506
#VU51468 - Permissions, Privileges, and Access Controls
CVE-2021-20633		 CWE-264 Low
No
No
 10.8.5 15.03.2021 SB2021031506
#VU51467 - Permissions, Privileges, and Access Controls
CVE-2021-20632		 CWE-264 Low
No
No
 10.8.5 15.03.2021 SB2021031506
#VU51466 - Permissions, Privileges, and Access Controls
CVE-2021-20631		 CWE-264 Low
No
No
 10.8.5 15.03.2021 SB2021031506
#VU51465 - Permissions, Privileges, and Access Controls
CVE-2021-20630		 CWE-264 Low
No
No
 10.8.5 15.03.2021 SB2021031506
#VU51464 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20629		 CWE-79 Low
No
No
 10.8.5 15.03.2021 SB2021031506
#VU51463 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20628		 CWE-79 Low
No
No
 10.8.5 15.03.2021 SB2021031506
#VU51460 - Permissions, Privileges, and Access Controls
CVE-2021-20625		 CWE-264 Low
No
No
 10.8.5 15.03.2021 SB2021031506


Showing elements 1 - 20 out of 25