{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T18:23:08.488","vulnerabilities":[{"cve":{"id":"CVE-2013-2305","sourceIdentifier":"vultures@jpcert.or.jp","published":"2013-04-25T10:55:02.210","lastModified":"2026-06-16T23:53:06.343","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords."},{"lang":"es","value":"Falsificación de petición en sitios cruzados (CSRF) en Cybozu Office antes de v8.1.6 y v9.x antes de v9.3.0, Cybozu Dezie antes de v8.0.7 y Cybozu Mailwise antes de v5.0.4 permite a atacantes remotos secuestrar la autenticación de los usuarios arbitrarios para pide que el cambio de contraseñas."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_office:*:*:*:*:*:*:*:*","versionEndIncluding":"8","matchCriteriaId":"35E7F6E6-4DFC-41D3-A23C-CDC9555AB5BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_office:6:*:*:*:*:*:*:*","matchCriteriaId":"A0B6B282-E664-4629-B028-C04CAB527D61"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_office:7:*:*:*:*:*:*:*","matchCriteriaId":"60CD7A78-766B-4137-842F-BC666434BDF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_office:9:*:*:*:*:*:*:*","matchCriteriaId":"DF14835A-C823-4D8B-9908-EBEDED7C713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_office:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"687E7EFF-4B7C-4F58-9B45-30C40E438621"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_dezie:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.6","matchCriteriaId":"5FADBC1A-D485-45C8-AEC6-3C50E2C4A472"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_dezie:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B27EBAB0-63CC-42FC-A1B5-685EDE65C7DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_dezie:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"216BA4D1-6D06-4AE2-9F15-82868CC3A17B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_dezie:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E4D09EA8-D423-4105-B5E5-0396F0EBE0A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_dezie:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"318E023B-104E-49C8-81D3-2ACD57788A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_dezie:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B8651495-0B9A-4F6E-B3D3-9F666A9302D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:cybozu_dezie:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"64C34368-EA05-4ECF-944F-260FFEEFF70C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:mailwise:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"689C0D4C-B10B-4DC9-B779-20FC993344E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:mailwise:1.0:*:*:*:*:*:*:*","matchCriteriaId":"51929894-F74C-4F8D-A12F-73CBA4FED396"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:mailwise:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EE25F18D-2317-4646-A00A-D627E3BF3868"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:mailwise:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6A28D9F5-6A27-42B5-8640-8560D68D930E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:mailwise:3.0:*:*:*:*:*:*:*","matchCriteriaId":"25E13BA8-A41F-4406-BBB3-8B2D969FB8D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:mailwise:3.0\\(0.2\\):*:*:*:*:*:*:*","matchCriteriaId":"CAB86035-A71A-4198-BADF-CA6723F2209E"}]}]}],"references":[{"url":"http://cs.cybozu.co.jp/information/20130415up10.php","source":"vultures@jpcert.or.jp","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN06251813/374951/index.html","source":"vultures@jpcert.or.jp"},{"url":"http://jvn.jp/en/jp/JVN06251813/index.html","source":"vultures@jpcert.or.jp"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000034","source":"vultures@jpcert.or.jp"},{"url":"http://cs.cybozu.co.jp/information/20130415up10.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN06251813/374951/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN06251813/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}