Known vulnerabilities in Cybozu Remote Service

Vendor: Cybozu
Software: Cybozu Remote Service
Software CPE: cpe:2.3:a:cybozu:cybozu_remote_service:*:*:*:*:*:*:*:*
Website: https://cybozu-global.com/
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cybozu Remote Service Cybozu Remote Service is affected by 15 known vulnerabilities: 4 medium, 11 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82573 - Resource exhaustion
CVE-2023-46278		 CWE-400 Low
No
No
 4.1.2 31.10.2023 SB2023103122
#VU69631 - Resource exhaustion
CVE-2022-44608		 CWE-400 Low
No
No
 4.0.4 28.11.2022 SB2022112807
#VU56947 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20807		 CWE-79 Low
No
No
 4.0.0 30.09.2021 SB2021093005
#VU56945 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-20806		 CWE-601 Medium
No
No
 4.0.0 30.09.2021 SB2021093005
#VU56944 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20805		 CWE-79 Low
No
No
 4.0.0 30.09.2021 SB2021093005
#VU56943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20800		 CWE-79 Low
No
No
 4.0.0 30.09.2021 SB2021093005
#VU56942 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2021-20797		 CWE-829 Low
No
No
 4.0.0 30.09.2021 SB2021093005
#VU56941 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-20796		 CWE-22 Medium
No
No
 4.0.0 30.09.2021 SB2021093005
#VU56940 - Resource exhaustion
CVE-2021-20804		 CWE-400 Medium
No
No
 4.0.0 30.09.2021 SB2021093005
#VU56939 - Permissions, Privileges, and Access Controls
CVE-2021-20803		 CWE-264 Medium
No
No
 4.0.0 30.09.2021 SB2021093005
#VU56938 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-20802		 CWE-113 Low
No
No
 4.0.0 30.09.2021 SB2021093005
#VU56937 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-20801		 CWE-611 Low
No
No
 4.0.0 30.09.2021 SB2021093005
#VU56936 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20799		 CWE-79 Low
No
No
 4.0.0 30.09.2021 SB2021093005
#VU56935 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20798		 CWE-79 Low
No
No
 4.0.0 30.09.2021 SB2021093005
#VU56934 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20795		 CWE-79 Low
No
No
 4.0.0 30.09.2021 SB2021093005