CVE-2024-39817: Cybozu Office

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.

Affected products

• Cybozu Office: from 10.0.0, before 10.8.7 (fixed in 10.8.7)

Published 2024-08-06. Last modified 2026-06-17.