Lucene search

K
nvd[email protected]NVD:CVE-2022-32583
HistoryAug 18, 2022 - 8:15 a.m.

CVE-2022-32583

2022-08-1808:15:07
web.nvd.nist.gov
5
operation restriction
vulnerability
cybozu office
scheduler
remote attacker
data alteration

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

35.3%

Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Scheduler via unspecified vectors.

Affected configurations

Nvd
Node
cybozuofficeRange10.0.010.8.5
VendorProductVersionCPE
cybozuoffice*cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

0.001

Percentile

35.3%

Related for NVD:CVE-2022-32583