Mailwise vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

MA

Product

Mailwise

by Cybozu · last CVE May 29, 2020

14

CVEs

0

On KEV

7.5

Max CVSS

0

New 30D

Vulnerabilities14 In the news0 Timeline

Severity mix

Critical 0High 1Medium 8Low 0

Severity

All severities14 Critical0 High1 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Mailwise to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-0702	7.5	2%	Jan 9	Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vectors Affected: 5.0.0 through 5.4.5
CVE-2016-4843	6.5	2%	Apr 20	Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information Affected: 5.0.0; 5.0.1; 5.0.4; 5.0.5; 5.0.6; 5.1.0; +8 more
CVE-2018-0559	6.1	1%	Jun 26	Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unspecified vectors Affected: 5.0.0 through 5.4.1
CVE-2018-0558	6.1	1%	Jun 26	Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified… Affected: 5.0.0 through 5.4.1
CVE-2018-0557	6.1	1%	Jun 26	Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified… Affected: 5.0.0 through 5.4.1
CVE-2020-5572	4.6	0%	May 29	Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors Affected: 1.0.0 through 1.0.1
CVE-2016-4841	4.3	1%	Apr 21	Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers Affected: 5.0.0; 5.0.1; 5.0.4; 5.0.5; 5.0.6; 5.1.0; +8 more
CVE-2016-4844	4.3	1%	Apr 20	Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks Affected: 5.0.0; 5.0.1; 5.0.4; 5.0.5; 5.0.6; 5.1.0; +8 more
CVE-2016-4842	4.3	2%	Apr 20	Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read Affected: 5.0.0; 5.0.1; 5.0.4; 5.0.5; 5.0.6; 5.1.0; +8 more
CVE-2014-5314	–	4%	Nov 24	Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via… Affected: through 5.1.3; 4.0
CVE-2013-4698	–	1%	Aug 16	Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading… Affected: 5.0.4; 5.0.5
CVE-2013-2305	–	1%	Apr 25	Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote… Affected: through 5.0; 1.0; 2.0; 2.1; 3.0; 3.0(0.2)
CVE-2011-1334	–	1%	Jun 29	Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before… Affected: through 3.0; 1.0; 2.0; 2.1
CVE-2006-4491	–	2%	Aug 31	Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote… Affected: 3.0(0.2)