CVE-2018-16172: Cybozu Remote Service Manager

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to delete the registered client certificate.

Affected products

• Cybozu Remote Service Manager: from 3.0.0, up to and including 3.1.8

Published 2019-01-09. Last modified 2026-06-17.