Cybozu Mailwise — known CVE vulnerabilities

Every CVE whose affected-product data names Cybozu Mailwise, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2014-5314 — CVSS 9.0 (critical): Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote…
• CVE-2018-0702 — CVSS 7.5 (high): Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified…
• CVE-2013-2305 — CVSS 6.8 (medium): Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu…
• CVE-2016-4843 — CVSS 6.5 (medium): Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.
• CVE-2018-0559 — CVSS 6.1 (medium): Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2018-0558 — CVSS 6.1 (medium): Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or…
• CVE-2018-0557 — CVSS 6.1 (medium): Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2020-5572 — CVSS 4.6 (medium): Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via…
• CVE-2016-4844 — CVSS 4.3 (medium): Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.
• CVE-2016-4842 — CVSS 4.3 (medium): Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.
• CVE-2016-4841 — CVSS 4.3 (medium): Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers.
• CVE-2011-1334 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise…
• CVE-2006-4491 — CVSS 4.0 (medium): Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon…
• CVE-2013-4698 — CVSS 3.5 (low): Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in…