CVE-2024-39817mediumCWE-200

CVE-2024-39817: medium-severity vulnerability in Cybozu Office

Published · Updated

Follow this CVE+ Monitor Cybozu Office

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%
Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Cybozu, Inc. · Cybozu Office
Related CVEs — Cybozu Office

In the same product, most dangerous first.

CVE-2019-6022—CVE-2019-6022EPSS 2.0%CVE-2018-0704—CVE-2018-0704EPSS 1.9%CVE-2018-0703—CVE-2018-0703EPSS 1.9%CVE-2017-2116—CVE-2017-2116EPSS 1.2%CVE-2018-0529—CVE-2018-0529EPSS 1.1%CVE-2017-2115—CVE-2017-2115EPSS 1.0%