| CVE-2017-2094 | TRUNG BÌNH4.3 | Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors. | 28/04/2017 |
| CVE-2017-2093 | TRUNG BÌNH4.3 | Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors. | 28/04/2017 |
| CVE-2017-2092 | TRUNG BÌNH5.4 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. | 28/04/2017 |
| CVE-2017-2091 | TRUNG BÌNH4.3 | Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors. | 28/04/2017 |
| CVE-2016-7815 | TRUNG BÌNH4.2 | Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network. | 28/04/2017 |
| CVE-2016-1187 | TRUNG BÌNH6.8 | Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates. | 21/04/2017 |
| CVE-2016-1186 | TRUNG BÌNH5.9 | Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates. | 21/04/2017 |
| CVE-2016-4841 | TRUNG BÌNH4.3 | Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers. | 21/04/2017 |
| CVE-2016-1194 | TRUNG BÌNH6.5 | Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service. | 21/04/2017 |
| CVE-2016-4844 | TRUNG BÌNH4.3 | Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks. | 20/04/2017 |
| CVE-2016-4843 | TRUNG BÌNH6.5 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information. | 20/04/2017 |
| CVE-2016-4842 | TRUNG BÌNH4.3 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read. | 20/04/2017 |
| CVE-2016-1220 | TRUNG BÌNH4.3 | Cybozu Garoon before 4.2.2 does not properly restrict access. | 20/04/2017 |
| CVE-2016-1218 | CAO8.8 | SQL injection vulnerability in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1217 | TRUNG BÌNH6.1 | Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1216 | TRUNG BÌNH6.1 | Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1215 | TRUNG BÌNH6.1 | Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1214 | TRUNG BÌNH6.1 | Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1213 | TRUNG BÌNH6.1 | The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites. | 20/04/2017 |
| CVE-2016-1219 | NGHIÊM TRỌNG9.8 | Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use. | 20/04/2017 |