Cybozu
Cybozu Remote Service Manager: vulnerabilidades y CVE
Cybozu Remote Service Manager tiene 22 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE22
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-26838 | Media (6.5) | 0.96% | — | 3 ago 2023 | Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause a denial-of-service (DoS) condition. |
| CVE-2021-20807 | Media (6.1) | 0.75% | — | 13 oct 2021 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors. |
| CVE-2021-20806 | Media (6.1) | 0.82% | — | 13 oct 2021 | Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. |
| CVE-2021-20805 | Media (5.4) | 0.60% | — | 13 oct 2021 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. |
| CVE-2021-20804 | Media (6.5) | 1.1% | — | 13 oct 2021 | Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of service (DoS) condition via unspecified vectors. |
| CVE-2021-20803 | Media (5.4) | 0.72% | — | 13 oct 2021 | Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen. |
| CVE-2021-20802 | Media (5.3) | 0.99% | — | 13 oct 2021 | HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the product. |
| CVE-2021-20801 | Media (6.5) | 1.1% | — | 13 oct 2021 | Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity (XXE) attacks and obtain the information stored in the product via unspecified vectors. This issue occurs only… |
| CVE-2021-20800 | Media (5.4) | 0.60% | — | 13 oct 2021 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. |
| CVE-2021-20799 | Media (5.4) | 0.61% | — | 13 oct 2021 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. |
| CVE-2021-20798 | Media (5.4) | 0.61% | — | 13 oct 2021 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. |
| CVE-2021-20797 | Media (5.4) | 0.61% | — | 13 oct 2021 | Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using… |
| CVE-2021-20796 | Media (6.5) | 1.5% | — | 13 oct 2021 | Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors. |
| CVE-2021-20795 | Alta (8.8) | 0.56% | — | 13 oct 2021 | Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be… |
| CVE-2018-16172 | Media (6.5) | 0.60% | — | 9 ene 2019 | Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to delete the registered… |
| CVE-2018-16171 | Alta (8.8) | 1.9% | — | 9 ene 2019 | Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server via unspecified vectors. |
| CVE-2018-16170 | Alta (8.1) | 1.7% | — | 9 ene 2019 | Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrary files via unspecified vectors. |
| CVE-2018-16169 | Alta (8.8) | 1.3% | — | 9 ene 2019 | Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecified vectors. |
| CVE-2016-7815 | Media (4.2) | 0.45% | — | 28 abr 2017 | Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network. |
| CVE-2014-7266 | Alta (7.8) | 1.8% | — | 1 feb 2015 | Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service (CPU consumption) via vectors that trigger colliding… |
| CVE-2014-1984 | Media (6.8) | 1.7% | — | 19 abr 2014 | Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors. |
| CVE-2014-1983 | Alta (7.8) | 2.3% | — | 19 abr 2014 | Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service (CPU consumption) via unknown vectors. |