CVE-2016-4867: Cybozu Office

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized project information via the Project function.

Affected products

• Cybozu Office: version 9.0 only; version 9.1.0 only; version 9.2.0 only; version 9.2.1 only; version 9.3.0 only; version 9.3.1 only; …

Published 2017-04-17. Last modified 2026-06-17.