Security Vulnerabilities - CVEs Published In October 2021
Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified vectors.
CVSS Score
8.8
EPSS Score
0.001
Published
2021-10-13
Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors.
CVSS Score
6.5
EPSS Score
0.004
Published
2021-10-13
Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox.
CVSS Score
5.4
EPSS Score
0.002
Published
2021-10-13
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVSS Score
5.4
EPSS Score
0.002
Published
2021-10-13
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVSS Score
5.4
EPSS Score
0.002
Published
2021-10-13
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVSS Score
5.4
EPSS Score
0.002
Published
2021-10-13
Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity (XXE) attacks and obtain the information stored in the product via unspecified vectors. This issue occurs only when using Mozilla Firefox.
CVSS Score
6.5
EPSS Score
0.005
Published
2021-10-13
Active Directory Federation Server Spoofing Vulnerability
CVSS Score
5.4
EPSS Score
0.005
Published
2021-10-13
Intune Management Extension Security Feature Bypass Vulnerability
CVSS Score
4.2
EPSS Score
0.002
Published
2021-10-13
Windows Graphics Component Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.022
Published
2021-10-13