Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users.
Max CVSS
8.8
EPSS Score
0.16%
Published
2016-02-17
Updated
2016-02-22
Cybozu Office 9.0.0 through 10.3 allows remote attackers to discover CSRF tokens via unspecified vectors, a different vulnerability than CVE-2015-8488.
Max CVSS
4.3
EPSS Score
0.27%
Published
2016-02-17
Updated
2016-02-22
2 vulnerabilities found