cybozu Vulnerability Advisory Catalog

Total 330 security vulnerabilities recorded for cybozu software and firmware.

← Back to All Vendors
Component: garoon

Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated atta...

📅 2022-07-04
CVSS 5.4 Dossier →
Component: garoon

Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Link....

📅 2022-07-04
CVSS 4.3 Dossier →
Component: garoon

Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Porta...

📅 2022-07-04
CVSS 4.3 Dossier →
Component: remote_service_manager

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary sc...

📅 2021-10-13
CVSS 6.1 Dossier →
Component: remote_service_manager

Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phish...

📅 2021-10-13
CVSS 6.1 Dossier →
Component: remote_service_manager

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject a...

📅 2021-10-13
CVSS 5.4 Dossier →
Component: remote_service_manager

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of service (DoS) condition via unspecified vectors....

📅 2021-10-13
CVSS 6.5 Dossier →
Component: remote_service_manager

Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data...

📅 2021-10-13
CVSS 5.4 Dossier →
Component: remote_service_manager

HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the product....

📅 2021-10-13
CVSS 5.3 Dossier →
Component: remote_service_manager

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity (XXE) attacks and obtain the information st...

📅 2021-10-13
CVSS 6.5 Dossier →
Component: remote_service_manager

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitra...

📅 2021-10-13
CVSS 5.4 Dossier →
Component: remote_service_manager

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject a...

📅 2021-10-13
CVSS 5.4 Dossier →
Component: remote_service_manager

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject a...

📅 2021-10-13
CVSS 5.4 Dossier →
Component: remote_service_manager

Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the...

📅 2021-10-13
CVSS 5.4 Dossier →
Component: remote_service_manager

Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrar...

📅 2021-10-13
CVSS 6.5 Dossier →
Component: remote_service_manager

Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack th...

📅 2021-10-13
CVSS 8.8 Dossier →
Component: garoon

Improper input validation vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the data of Comm...

📅 2021-08-18
CVSS 4.3 Dossier →
Component: garoon

Cross-site scripting vulnerability in some functions of E-mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote authenticated attacker to inject an arb...

📅 2021-08-18
CVSS 5.4 Dossier →
Component: garoon

There is a vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.0, which may allow a remote authenticated attacker to delete the route information ...

📅 2021-08-18
CVSS 4.3 Dossier →
Component: garoon

Information disclosure vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the title of Bullet...

📅 2021-08-18
CVSS 4.3 Dossier →
Component: garoon

Cross-site scripting vulnerability in some functions of E-Mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote attacker to inject an arbitrary script ...

📅 2021-08-18
CVSS 6.1 Dossier →
Component: garoon

Cross-site scripting vulnerability in Message of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via...

📅 2021-08-18
CVSS 5.4 Dossier →
Component: garoon

Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script vi...

📅 2021-08-18
CVSS 5.4 Dossier →
Component: garoon

Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to d...

📅 2021-08-18
CVSS 4.3 Dossier →
Page 3 of 14 (330 Total Records)