cybozu Vulnerability Advisory Catalog

Total 330 security vulnerabilities recorded for cybozu software and firmware.

← Back to All Vendors
Component: garoon

Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary s...

📅 2021-08-18
CVSS 5.4 Dossier →
Component: garoon

Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified v...

📅 2021-08-18
CVSS 6.1 Dossier →
Component: garoon

Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified ...

📅 2021-08-18
CVSS 6.1 Dossier →
Component: garoon

Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Attaching Fil...

📅 2021-08-18
CVSS 5.3 Dossier →
Component: garoon

Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of P...

📅 2021-08-18
CVSS 4.3 Dossier →
Component: garoon

Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated to alter the data of E-mail without th...

📅 2021-08-18
CVSS 4.3 Dossier →
Component: garoon

Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker with an administrative privilege to alter t...

📅 2021-08-18
CVSS 2.7 Dossier →
Component: garoon

Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Us...

📅 2021-08-18
CVSS 4.3 Dossier →
Component: garoon

Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter the data of ...

📅 2021-08-18
CVSS 4.3 Dossier →
Component: garoon

Cross-site request forgery (CSRF) vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to hijack the authen...

📅 2021-08-18
CVSS 8.0 Dossier →
Component: garoon

Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Po...

📅 2021-08-18
CVSS 4.3 Dossier →
Component: garoon

Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Addr...

📅 2021-08-18
CVSS 4.3 Dossier →
Component: garoon

Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Porta...

📅 2021-08-18
CVSS 4.3 Dossier →
Component: garoon

Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Workfl...

📅 2021-08-18
CVSS 4.3 Dossier →
Component: garoon

Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script v...

📅 2021-08-18
CVSS 5.4 Dossier →
Component: office

Improper access control vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and ...

📅 2021-03-18
CVSS 4.3 Dossier →
Component: office

Improper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obt...

📅 2021-03-18
CVSS 4.3 Dossier →
Component: office

Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction ...

📅 2021-03-18
CVSS 4.3 Dossier →
Component: office

Improper input validation vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attacker to alter the data of Custom App ...

📅 2021-03-18
CVSS 6.5 Dossier →
Component: office

Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction ...

📅 2021-03-18
CVSS 4.3 Dossier →
Component: office

Cross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified v...

📅 2021-03-18
CVSS 6.1 Dossier →
Component: office

Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspeci...

📅 2021-03-18
CVSS 6.1 Dossier →
Component: office

Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspeci...

📅 2021-03-18
CVSS 6.1 Dossier →
Component: office

Improper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and al...

📅 2021-03-18
CVSS 6.5 Dossier →
Page 4 of 14 (330 Total Records)