CVE-2017-10857: Cybozu Office

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function.

Affected products

• Cybozu Office: version 10.0.0 only; version 10.0.1 only; version 10.0.2 only; version 10.1.0 only; version 10.1.2 only; version 10.2.0 only; …

Published 2017-10-12. Last modified 2026-06-17.