CVE-2013-3656: Cybozu Office

Medium severity, CVSS 5.8. EPSS: 2% chance of exploitation in the next 30 days.

Cybozu Office 9.1.0 and earlier does not properly manage sessions, which allows remote attackers to bypass authentication by leveraging knowledge of a login URL.

Affected products

• Cybozu Cybozu Office: up to and including 9.1.0

Published 2013-07-20. Last modified 2026-06-16.