CG
Product
Cybozu Garoon
128
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 15Medium 109Low 2
Watch
Add Cybozu Garoon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0607 | 8.8 | Jul 26 | SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via… Affected: 3.5.0 to 4.6.2 |
| CVE-2018-0530 | 8.8 | Apr 16 | SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors Affected: 3.5.0 to 4.2.6 |
| CVE-2016-4907 | 8.8 | Jun 9 | Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors Affected: 3.0.0 to 4.2.2 |
| CVE-2016-7803 | 8.8 | Jun 9 | SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiReport" function Affected: 3.0.0 to 4.2.2 |
| CVE-2019-5931 | 8.7 | May 17 | Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified vectors Affected: 4.0.0 to 4.6.3 |
| CVE-2022-30602 | 8.1 | Jul 11 | Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to alter the file information and/or delete the files Affected: 4.0.0 to 5.9.1 |
| CVE-2022-29484 | 8.1 | Jul 4 | Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a remote authenticated attacker to delete the data of Space Affected: 4.0.0 to 5.9.0 |
| CVE-2020-5580 | 8.1 | Jun 30 | Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Single sign-on settings via unspecified vectors Affected: 4.0.0 to 5.0.1 |
| CVE-2018-0673 | 8.1 | Nov 15 | Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors Affected: 3.5.0 to 4.6.3 |
| CVE-2021-20758 | 8.0 | Aug 18 | Cross-site request forgery (CSRF) vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to hijack the authentication of administrators… Affected: 4.0.0 to 5.0.2 |
| CVE-2026-22888 | 7.5 | Feb 2 | Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product Affected: 5.0.0 to 6.0.3 |
| CVE-2020-5584 | 7.5 | Jun 30 | Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors Affected: 4.0.0 to 5.0.1 |
| CVE-2020-5567 | 7.5 | Apr 28 | Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in Application Menu Affected: 4.0.0 to 4.10.3 |
| CVE-2018-16178 | 7.5 | Jan 9 | Cybozu Garoon 3.0.0 to 4.10.0 allows remote attackers to bypass access restriction to view information available only for a sign-on user via Single sign-on function Affected: 3.0.0 to 4.10.0 |
| CVE-2019-5934 | 7.2 | May 17 | SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of… Affected: 4.0.0 to 4.10.0 |
Showing 15