CG
Product
Cybozu Garoon
128
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 15Medium 109Low 2
Watch
Add Cybozu Garoon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-5588 | 4.9 | Jun 30 | Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to obtain unintended information via unspecified vectors Affected: 5.0.0 to 5.0.1 |
| CVE-2020-5562 | 4.9 | Apr 28 | Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege to issue arbitrary HTTP requests to… Affected: 4.6.0 to 4.6.3 |
| CVE-2018-0533 | 4.9 | Apr 16 | Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified vectors Affected: 3.0.0 to 4.2.6 |
| CVE-2017-2254 | 4.9 | Aug 28 | Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input Affected: 3.5.0 to 4.2.5 |
| CVE-2022-29513 | 4.8 | Jul 4 | Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary… Affected: 4.10.0 to 5.5.1 |
| CVE-2020-5585 | 4.8 | Jun 30 | Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors Affected: 5.0.0 to 5.0.1 |
| CVE-2020-5586 | 4.8 | Jun 30 | Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors Affected: 4.10.3 to 5.0.1 |
| CVE-2019-5932 | 4.8 | May 17 | Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Portal' Affected: 4.6.0 to 4.6.3 |
| CVE-2017-2146 | 4.8 | Jul 7 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu Affected: 3.0.0 to 4.2.4 |
| CVE-2024-31402 | 4.3 | Jun 11 | Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker to delete the data of Shared To-Dos Affected: 5.0.0 to 5.15.2 |
| CVE-2024-31398 | 4.3 | Jun 11 | Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.2 Affected: 5.0.0 to 5.15.2 |
| CVE-2024-31404 | 4.3 | Jun 11 | Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.5.0 to 6.0.0, which may allow a user who can log in to the product to view the data of Scheduler Affected: 5.5.0 to 6.0.0 |
| CVE-2023-27384 | 4.3 | May 23 | Operation restriction bypass vulnerability in MultiReport of Cybozu Garoon 5.15.0 allows a remote authenticated attacker to alter the data of MultiReport Affected: 5.15.0 |
| CVE-2023-27304 | 4.3 | May 23 | Operation restriction bypass vulnerability in Message and Bulletin of Cybozu Garoon 4.6.0 to 5.9.2 allows a remote authenticated attacker to alter the data of Message and/or… Affected: 4.6.0 to 5.9.2 |
| CVE-2022-31472 | 4.3 | Jul 11 | Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to obtain the data of Cabinet Affected: 4.0.0 to 5.5.1 |
| CVE-2022-30943 | 4.3 | Jul 11 | Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data of Bulletin Affected: 4.0.0 to 5.9.1 |
| CVE-2022-29471 | 4.3 | Jul 4 | Browse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote authenticated attacker to obtain the data of Bulletin Affected: 4.6.0 to 5.9.0 |
| CVE-2022-29467 | 4.3 | Jul 4 | Address information disclosure vulnerability in Cybozu Garoon 4.2.0 to 5.5.1 allows a remote authenticated attacker to obtain some data of Address Affected: 4.2.0 to 5.5.1 |
| CVE-2022-28718 | 4.3 | Jul 4 | Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a remote authenticated attacker to alter the data of Bulletin Affected: 4.0.0 to 5.5.1 |
| CVE-2022-28692 | 4.3 | Jul 4 | Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Scheduler Affected: 4.0.0 to 5.5.1 |
| CVE-2022-27807 | 4.3 | Jul 4 | Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to disable to add Categories Affected: 4.0.0 to 5.5.1 |
| CVE-2022-27803 | 4.3 | Jul 4 | Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space Affected: 4.0.0 to 5.5.1 |
| CVE-2022-27661 | 4.3 | Jul 4 | Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Workflow Affected: 4.0.0 to 5.5.1 |
| CVE-2022-26054 | 4.3 | Jul 4 | Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Link Affected: 4.0.0 to 5.5.1 |
| CVE-2022-26051 | 4.3 | Jul 4 | Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Portal Affected: 4.0.0 to 5.5.1 |
| CVE-2021-20775 | 4.3 | Aug 18 | Improper input validation vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the data of Comment and Space without the… Affected: 4.10.0 to 5.5.0 |
| CVE-2021-20773 | 4.3 | Aug 18 | There is a vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.0, which may allow a remote authenticated attacker to delete the route information Workflow without the… Affected: 4.0.0 to 5.5.0 |
| CVE-2021-20772 | 4.3 | Aug 18 | Information disclosure vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the title of Bulletin without the viewing… Affected: 4.10.0 to 5.5.0 |
| CVE-2021-20768 | 4.3 | Aug 18 | Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to delete the data of Scheduler… Affected: 4.0.0 to 5.0.2 |
| CVE-2021-20763 | 4.3 | Aug 18 | Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the appropriate… Affected: 4.0.0 to 5.0.2 |
| CVE-2021-20762 | 4.3 | Aug 18 | Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated to alter the data of E-mail without the appropriate privilege Affected: 4.0.0 to 5.0.2 |
| CVE-2021-20760 | 4.3 | Aug 18 | Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of User Profile without the… Affected: 4.0.0 to 5.0.2 |
| CVE-2021-20759 | 4.3 | Aug 18 | Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the… Affected: 4.6.0 to 5.0.2 |
| CVE-2021-20757 | 4.3 | Aug 18 | Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate… Affected: 4.0.0 to 5.0.2 |
| CVE-2021-20756 | 4.3 | Aug 18 | Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Address without the viewing… Affected: 4.0.0 to 5.0.2 |
| CVE-2021-20755 | 4.3 | Aug 18 | Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the viewing… Affected: 4.0.0 to 5.0.2 |
| CVE-2021-20754 | 4.3 | Aug 18 | Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Workflow without the appropriate… Affected: 4.0.0 to 5.0.2 |
| CVE-2020-5582 | 4.3 | Jun 30 | Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors Affected: 4.0.0 to 5.0.1 |
| CVE-2020-5566 | 4.3 | Apr 28 | Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and… Affected: 4.0.0 to 4.10.3 |
| CVE-2020-5565 | 4.3 | Apr 28 | Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's data via the applications 'Workflow' and… Affected: 4.0.0 to 4.10.3 |
| CVE-2019-5935 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User… Affected: 4.0.0 to 4.10.1 |
| CVE-2019-5942 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges via the Multiple Files Download function… Affected: 4.0.0 to 4.10.1 |
| CVE-2019-5944 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the contents of application 'Address' without modify privileges via the… Affected: 4.0.0 to 4.10.1 |
| CVE-2019-5933 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.10.0 allows remote authenticated attackers to bypass access restriction to view the Bulletin Board without view privileges via the application 'Bulletin' Affected: 4.0.0 to 4.10.0 |
| CVE-2019-5943 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to view the information without view privileges via the application 'Bulletin' and… Affected: 4.0.0 to 4.10.1 |
| CVE-2019-5941 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges via the application 'Multi Report' Affected: 4.0.0 to 4.10.1 |
| CVE-2019-5930 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System' Affected: 4.0.0 to 4.6.3 |
| CVE-2018-0531 | 4.3 | Apr 16 | Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a folder and/or notification settings via… Affected: 3.0.0 to 4.2.6 |
| CVE-2018-0550 | 4.3 | Apr 16 | Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors Affected: 3.5.0 to 4.6.1 |
| CVE-2018-0548 | 4.3 | Apr 16 | Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unspecified vectors Affected: 4.0.0 to 4.6.0 |