Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Cybozu Subscribe
Filtered by product Remote Service Manager
Total 21 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-20803 1 Cybozu 1 Remote Service Manager 2021-10-19 4.0 MEDIUM 5.4 MEDIUM
Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen.
CVE-2021-20801 1 Cybozu 1 Remote Service Manager 2021-10-19 4.0 MEDIUM 6.5 MEDIUM
Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity (XXE) attacks and obtain the information stored in the product via unspecified vectors. This issue occurs only when using Mozilla Firefox.
CVE-2021-20802 1 Cybozu 1 Remote Service Manager 2021-10-19 5.0 MEDIUM 5.3 MEDIUM
HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the product.
CVE-2021-20806 1 Cybozu 1 Remote Service Manager 2021-10-19 5.8 MEDIUM 6.1 MEDIUM
Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2021-20804 1 Cybozu 1 Remote Service Manager 2021-10-19 4.0 MEDIUM 6.5 MEDIUM
Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of service (DoS) condition via unspecified vectors.
CVE-2021-20807 1 Cybozu 1 Remote Service Manager 2021-10-19 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20805 1 Cybozu 1 Remote Service Manager 2021-10-19 3.5 LOW 5.4 MEDIUM
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20800 1 Cybozu 1 Remote Service Manager 2021-10-19 3.5 LOW 5.4 MEDIUM
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20799 1 Cybozu 1 Remote Service Manager 2021-10-19 3.5 LOW 5.4 MEDIUM
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20798 1 Cybozu 1 Remote Service Manager 2021-10-19 3.5 LOW 5.4 MEDIUM
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20797 1 Cybozu 1 Remote Service Manager 2021-10-19 3.5 LOW 5.4 MEDIUM
Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox.
CVE-2021-20796 1 Cybozu 1 Remote Service Manager 2021-10-19 4.0 MEDIUM 6.5 MEDIUM
Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors.
CVE-2021-20795 1 Cybozu 1 Remote Service Manager 2021-10-19 6.8 MEDIUM 8.8 HIGH
Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified vectors.
CVE-2018-16172 1 Cybozu 1 Remote Service Manager 2020-08-24 5.8 MEDIUM 6.5 MEDIUM
Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to delete the registered client certificate.
CVE-2014-1983 1 Cybozu 1 Remote Service Manager 2019-07-16 7.8 HIGH N/A
Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service (CPU consumption) via unknown vectors.
CVE-2014-1984 1 Cybozu 1 Remote Service Manager 2019-07-16 6.8 MEDIUM N/A
Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors.
CVE-2018-16169 1 Cybozu 1 Remote Service Manager 2019-01-14 6.5 MEDIUM 8.8 HIGH
Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecified vectors.
CVE-2018-16171 2 Cybozu, Microsoft 2 Remote Service Manager, Windows 2019-01-14 6.8 MEDIUM 8.8 HIGH
Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server via unspecified vectors.
CVE-2018-16170 2 Cybozu, Microsoft 2 Remote Service Manager, Windows 2019-01-14 6.5 MEDIUM 8.1 HIGH
Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrary files via unspecified vectors.
CVE-2016-7815 1 Cybozu 1 Remote Service Manager 2017-05-10 4.9 MEDIUM 4.2 MEDIUM
Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network.