Cybozu Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

Cybozu Garoon188
Cybozu Office57
Cybozu Remote Service20
Cybozu Mailwise11
Cybozu KUNAI6

Przeciwdziałanie

Official Fix84
Temporary Fix0
Workaround0
Unavailable0
Not Defined226

Wykorzystywanie

High9
Functional0
Proof-of-Concept2
Unproven5
Not Defined294

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent8
Network302

Uwierzytelnianie

Not Defined0
High8
Low187
None115

Interakcja z użytkownikiem

Not Defined0
Required101
None209

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤432
≤591
≤692
≤763
≤825
≤94
≤103

CVSSv3 Temp

≤10
≤20
≤31
≤432
≤595
≤6101
≤755
≤820
≤93
≤103

VulDB

≤10
≤20
≤34
≤443
≤585
≤655
≤797
≤821
≤92
≤103

NVD

≤10
≤20
≤33
≤40
≤573
≤624
≤761
≤814
≤915
≤104

CNA

≤10
≤20
≤30
≤40
≤51
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k53
<2k146
<5k111
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k302
<2k8
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (20): Cybozu Dotsales (1), Cybozu Office (5), Desktop (1), Dezie (5), Garoon (188), Garoon Keitai (1), KUNAI (6), KUNAI Browser for Remote Service (1), Kintone (1), Kintone Mobile (1), Live (4), Mailwise (11), Musoo (1), Office (57), Remote Service (20), Remote Service Manager (3), Request (1), Share 360 (1), Share360 (1), yetiforcecrm (1)

Link to Vendor Website: https://cybozu-global.com/

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2024-02-066.46.4Cybozu KUNAI denial of serviceAndroid App SoftwareNot DefinedNot Defined0.000810.02CVE-2024-23304
2023-11-015.45.4Cybozu Remote Service Storage denial of serviceNieznanyNot DefinedNot Defined0.000650.00CVE-2023-46278
2023-08-035.45.4Cybozu Remote Service Mobile Device Data Import directory traversalNieznanyNot DefinedNot Defined0.000650.00CVE-2022-26838
2023-05-235.45.4Cybozu Garoon Message denial of serviceGroupware SoftwareNot DefinedNot Defined0.000650.00CVE-2023-26595
2023-05-235.35.3Cybozu Garoon MultiReport privilege escalationGroupware SoftwareNot DefinedNot Defined0.000560.04CVE-2023-27384
2023-05-235.35.3Cybozu Garoon Message/Bulletin Privilege EscalationGroupware SoftwareNot DefinedNot Defined0.000560.00CVE-2023-27304
2022-12-075.95.9Cybozu Remote Service denial of serviceNieznanyNot DefinedNot Defined0.001670.00CVE-2022-44608
2022-08-184.84.8Cybozu Office cross site scriptingOffice Suite SoftwareNot DefinedNot Defined0.001030.00CVE-2022-28715
2022-08-184.84.8Cybozu Office cross site scriptingOffice Suite SoftwareNot DefinedNot Defined0.001030.00CVE-2022-33151
2022-08-184.84.8Cybozu Office cross site scriptingOffice Suite SoftwareNot DefinedNot Defined0.001030.00CVE-2022-30604
2022-08-184.34.3Cybozu Office Custom App privilege escalationOffice Suite SoftwareNot DefinedNot Defined0.000820.00CVE-2022-29891
2022-08-184.84.8Cybozu Office cross site scriptingOffice Suite SoftwareNot DefinedNot Defined0.001030.00CVE-2022-29487
2022-08-184.34.3Cybozu Office Address Book privilege escalationOffice Suite SoftwareNot DefinedNot Defined0.000820.00CVE-2022-33311
2022-08-186.46.4Cybozu Office HTTP Header privilege escalationOffice Suite SoftwareNot DefinedNot Defined0.001290.00CVE-2022-32453
2022-08-184.34.3Cybozu Office Cabinet privilege escalationOffice Suite SoftwareNot DefinedNot Defined0.000820.04CVE-2022-32283
2022-08-184.34.3Cybozu Office Scheduler information disclosureOffice Suite SoftwareNot DefinedNot Defined0.000820.00CVE-2022-25986
2022-08-185.45.4Cybozu Office Scheduler privilege escalationOffice Suite SoftwareNot DefinedNot Defined0.000820.02CVE-2022-32583
2022-08-184.94.9Cybozu Office Project privilege escalationOffice Suite SoftwareNot DefinedNot Defined0.000820.00CVE-2022-32544
2022-08-184.84.8Cybozu Office System Configuration information disclosureOffice Suite SoftwareNot DefinedNot Defined0.001340.00CVE-2022-30693
2022-07-115.35.3Cybozu Garoon Cabinet privilege escalationGroupware SoftwareNot DefinedNot Defined0.000820.00CVE-2022-31472
2022-07-115.35.3Cybozu Garoon Bulletin privilege escalationGroupware SoftwareNot DefinedNot Defined0.000820.00CVE-2022-30943
2022-07-115.45.4Cybozu Garoon information disclosureGroupware SoftwareNot DefinedNot Defined0.000930.00CVE-2022-29512
2022-07-117.27.2Cybozu Garoon File privilege escalationGroupware SoftwareNot DefinedNot Defined0.001580.00CVE-2022-30602
2022-07-045.35.3Cybozu Garoon Portal privilege escalationGroupware SoftwareNot DefinedNot Defined0.000820.00CVE-2022-26051
2022-07-043.63.6Cybozu Garoon cross site scriptingGroupware SoftwareNot DefinedNot Defined0.000660.00CVE-2022-29513

285 więcej wpisów nie jest pokazywanych

Interested in the pricing of exploits?

See the underground prices here!