Cybozu
Cybozu Mailwise: vulnerabilidades y CVE
Cybozu Mailwise tiene 14 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE14
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2020-5572 | Media (4.6) | 0.34% | — | 29 may 2020 | Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors. |
| CVE-2018-0702 | Alta (7.5) | 1.9% | — | 9 ene 2019 | Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vectors. |
| CVE-2018-0559 | Media (6.1) | 0.81% | — | 26 jun 2018 | Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors. |
| CVE-2018-0558 | Media (6.1) | 0.81% | — | 26 jun 2018 | Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors. |
| CVE-2018-0557 | Media (6.1) | 0.81% | — | 26 jun 2018 | Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors. |
| CVE-2016-4841 | Media (4.3) | 1.5% | — | 21 abr 2017 | Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers. |
| CVE-2016-4844 | Media (4.3) | 1.5% | — | 20 abr 2017 | Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks. |
| CVE-2016-4843 | Media (6.5) | 1.9% | — | 20 abr 2017 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information. |
| CVE-2016-4842 | Media (4.3) | 1.6% | — | 20 abr 2017 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read. |
| CVE-2014-5314 | Alta (9) | 3.7% | — | 24 nov 2014 | Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages. |
| CVE-2013-4698 | Baja (3.5) | 0.96% | — | 16 ago 2013 | Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user's own… |
| CVE-2013-2305 | Media (6.8) | 0.64% | — | 25 abr 2013 | Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of… |
| CVE-2011-1334 | Media (4.3) | 1.2% | — | 29 jun 2011 | Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject… |
| CVE-2006-4491 | Media (4) | 1.6% | — | 31 ago 2006 | Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via… |