CVE-2019-6022: Cybozu Office

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to alter arbitrary files via the 'Customapp' function.

Affected products

• Cybozu Office: from 10.0.0, up to and including 10.8.3

Published 2019-12-26. Last modified 2026-06-17.