CI
Vendor
Cybozu, Inc.
20
CVEs
0
On KEV
0
New 30D
Products
CG9.0
Cybozu Garoon
Cybozu, Inc.
16 CVEs0 on KEV0 new
CR6.5
Cybozu Remote Service
Cybozu, Inc.
2 CVEs0 on KEV0 new
CK7.5
Cybozu KUNAI for Android
Cybozu, Inc.
1 CVEs0 on KEV0 new
CO6.5
Cybozu Office
Cybozu, Inc.
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-57279 | CG Cybozu Garoon Cybozu, Inc | 6.8 | Aug 10 | Cybozu Garoon contains a cross-site scripting vulnerability |
| CVE-2026-22888 | CG Cybozu Garoon Cybozu, Inc. | 7.5 | Feb 2 | Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product |
| CVE-2026-22881 | CG Cybozu Garoon Cybozu, Inc. | 5.4 | Feb 2 | Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords |
| CVE-2026-20711 | CG Cybozu Garoon Cybozu, Inc. | 6.1 | Feb 2 | Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords |
| CVE-2024-39817 | CO Cybozu Office Cybozu, Inc. | 6.5 | Aug 6 | Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user… |
| CVE-2024-39457 | CG Cybozu Garoon Cybozu, Inc. | 5.4 | Jul 19 | Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview |
| CVE-2024-31397 | CG Cybozu Garoon Cybozu, Inc. | 4.9 | Jun 11 | Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2 |
| CVE-2024-31399 | CG Cybozu Garoon Cybozu, Inc. | 6.5 | Jun 11 | Excessive platform resource consumption within a loop issue exists in Cybozu Garoon 5.0.0 to 5.15.2 |
| CVE-2024-31402 | CG Cybozu Garoon Cybozu, Inc. | 4.3 | Jun 11 | Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker to delete the data of Shared To-Dos |
| CVE-2024-31398 | CG Cybozu Garoon Cybozu, Inc. | 4.3 | Jun 11 | Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.2 |
| CVE-2024-31404 | CG Cybozu Garoon Cybozu, Inc. | 4.3 | Jun 11 | Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.5.0 to 6.0.0, which may allow a user who can log in to the product to view the data of Scheduler |
| CVE-2024-31403 | CG Cybozu Garoon Cybozu, Inc. | 5.4 | Jun 11 | Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 6.0.0 allows a remote authenticated attacker to alter and/or obtain the data of Memo |
| CVE-2024-31401 | CG Cybozu Garoon Cybozu, Inc. | 9.0 | Jun 11 | Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script on the… |
| CVE-2024-31400 | CG Cybozu Garoon Cybozu, Inc. | 6.5 | Jun 11 | Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.0 |
| CVE-2024-23304 | CK Cybozu KUNAI for Android Cybozu, Inc. | 7.5 | Feb 6 | Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by performing certain operations |
| CVE-2023-46278 | CR Cybozu Remote Service Cybozu, Inc. | 6.5 | Oct 31 | Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated attacker to consume huge storage space or cause significantly… |
| CVE-2022-26838 | CR Cybozu Remote Service Cybozu, Inc. | 6.5 | Aug 3 | Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause a denial-of-service (DoS) condition |
| CVE-2023-26595 | CG Cybozu Garoon Cybozu, Inc. | 6.5 | May 23 | Denial-of-service (DoS) vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows a remote authenticated attacker to cause a denial of service condition |
| CVE-2023-27384 | CG Cybozu Garoon Cybozu, Inc. | 4.3 | May 23 | Operation restriction bypass vulnerability in MultiReport of Cybozu Garoon 5.15.0 allows a remote authenticated attacker to alter the data of MultiReport |
| CVE-2023-27304 | CG Cybozu Garoon Cybozu, Inc. | 4.3 | May 23 | Operation restriction bypass vulnerability in Message and Bulletin of Cybozu Garoon 4.6.0 to 5.9.2 allows a remote authenticated attacker to alter the data of Message and/or… |