CG
Product
Cybozu Garoon
128
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 15Medium 109Low 2
Watch
Add Cybozu Garoon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-2258 | 4.3 | Aug 28 | Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications" Affected: 4.2.4 to 4.2.5 |
| CVE-2016-4909 | 4.3 | Jun 9 | Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the authentication of a logged in user to force a logout via… Affected: 3.0.0 to 4.2.2 |
| CVE-2016-4910 | 4.3 | Jun 9 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operational administrators' MultiReport filters via unspecified… Affected: 3.0.0 to 4.2.2 |
| CVE-2016-7801 | 4.3 | Jun 9 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors Affected: 3.0.0 to 4.2.2 |
| CVE-2016-4908 | 4.3 | Jun 9 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unspecified vectors Affected: 3.0.0 to 4.2.2 |
| CVE-2017-2091 | 4.3 | Apr 28 | Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified… Affected: 3.0.0 to 4.2.3 |
| CVE-2017-2095 | 4.3 | Apr 28 | Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via… Affected: 3.0.0 to 4.2.3 |
| CVE-2017-2094 | 4.3 | Apr 28 | Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via… Affected: 3.0.0 to 4.2.3 |
| CVE-2017-2093 | 4.3 | Apr 28 | Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors Affected: 3.0.0 to 4.2.3 |