CVE-2010-2029: Cybozu Dotsales

Medium severity, CVSS 5.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to bypass authentication and obtain or modify sensitive information by using the unique ID of the user's cell phone.

Affected products

• Cybozu Cybozu Dotsales: any version
• Cybozu Cybozu Office: version 7 only

Published 2010-05-24. Last modified 2026-06-16.