GA
Product
Garoon
198
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 20Medium 126Low 2
Watch
Add Garoon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-30943 | 4.3 | Jul 11 | Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data of Bulletin Affected: 4.0.0 through 5.9.1 |
| CVE-2022-29471 | 4.3 | Jul 4 | Browse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote authenticated attacker to obtain the data of Bulletin Affected: 4.6.0 through 5.9.0 |
| CVE-2022-29467 | 4.3 | Jul 4 | Address information disclosure vulnerability in Cybozu Garoon 4.2.0 to 5.5.1 allows a remote authenticated attacker to obtain some data of Address Affected: 4.2.0 through 5.5.1 |
| CVE-2022-28718 | 4.3 | Jul 4 | Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a remote authenticated attacker to alter the data of Bulletin Affected: 4.0.0 through 5.5.1 |
| CVE-2022-28692 | 4.3 | Jul 4 | Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Scheduler Affected: 4.0.0 through 5.5.1 |
| CVE-2022-27807 | 4.3 | Jul 4 | Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to disable to add Categories Affected: 4.0.0 through 5.5.1 |
| CVE-2022-27803 | 4.3 | Jul 4 | Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space Affected: 4.0.0 through 5.5.1 |
| CVE-2022-27661 | 4.3 | Jul 4 | Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Workflow Affected: 4.0.0 through 5.5.1 |
| CVE-2022-26054 | 4.3 | Jul 4 | Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Link Affected: 4.0.0 through 5.5.1 |
| CVE-2022-26051 | 4.3 | Jul 4 | Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Portal Affected: 4.0.0 through 5.5.1 |
| CVE-2021-20775 | 4.3 | Aug 18 | Improper input validation vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the data of Comment and Space without the… Affected: 4.10.0 through 5.5.0 |
| CVE-2021-20773 | 4.3 | Aug 18 | There is a vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.0, which may allow a remote authenticated attacker to delete the route information Workflow without the… Affected: 4.0.0 through 5.5.0 |
| CVE-2021-20772 | 4.3 | Aug 18 | Information disclosure vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the title of Bulletin without the viewing… Affected: 4.10.0 through 5.5.0 |
| CVE-2021-20768 | 4.3 | Aug 18 | Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to delete the data of Scheduler… Affected: 4.0.0 through 5.0.2 |
| CVE-2021-20763 | 4.3 | Aug 18 | Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the appropriate… Affected: 4.0.0 through 5.0.2 |
| CVE-2021-20762 | 4.3 | Aug 18 | Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated to alter the data of E-mail without the appropriate privilege Affected: 4.0.0 through 5.0.2 |
| CVE-2021-20760 | 4.3 | Aug 18 | Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of User Profile without the… Affected: 4.0.0 through 5.0.2 |
| CVE-2021-20759 | 4.3 | Aug 18 | Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the… Affected: 4.6.0 through 5.0.2 |
| CVE-2021-20757 | 4.3 | Aug 18 | Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate… Affected: 4.0.0 through 5.0.2 |
| CVE-2021-20756 | 4.3 | Aug 18 | Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Address without the viewing… Affected: 4.0.0 through 5.0.2 |
| CVE-2021-20755 | 4.3 | Aug 18 | Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the viewing… Affected: 4.0.0 through 5.0.2 |
| CVE-2021-20754 | 4.3 | Aug 18 | Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Workflow without the appropriate… Affected: 4.0.0 through 5.0.2 |
| CVE-2020-5582 | 4.3 | Jun 30 | Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors Affected: 4.0.0 through 5.0.1 |
| CVE-2020-5566 | 4.3 | Apr 28 | Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and… Affected: 4.0.0 through 4.10.3 |
| CVE-2020-5565 | 4.3 | Apr 28 | Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's data via the applications 'Workflow' and… Affected: 4.0.0 through 4.10.3 |
| CVE-2019-5977 | 4.3 | Sep 12 | Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail' Affected: 4.0.0 through 4.10.2 |
| CVE-2019-5944 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the contents of application 'Address' without modify privileges via the… Affected: 4.0.0 through 4.10.1 |
| CVE-2019-5943 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to view the information without view privileges via the application 'Bulletin' and… Affected: 4.0.0 through 4.10.1 |
| CVE-2019-5942 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges via the Multiple Files Download function… Affected: 4.0.0 through 4.10.1 |
| CVE-2019-5941 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges via the application 'Multi Report' Affected: 4.0.0 through 4.10.1 |
| CVE-2019-5935 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User… Affected: 4.0.0 through 4.10.1 |
| CVE-2019-5933 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.10.0 allows remote authenticated attackers to bypass access restriction to view the Bulletin Board without view privileges via the application 'Bulletin' Affected: 4.0.0 through 4.10.0 |
| CVE-2019-5930 | 4.3 | May 17 | Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System' Affected: 4.0.0 through 4.6.3 |
| CVE-2018-0550 | 4.3 | Apr 16 | Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors Affected: 3.5.0 through 4.6.1 |
| CVE-2018-0548 | 4.3 | Apr 16 | Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unspecified vectors Affected: 4.0.0 through 4.6.0 |
| CVE-2018-0531 | 4.3 | Apr 16 | Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a folder and/or notification settings via… Affected: 3.0.0 through 4.2.6 |
| CVE-2017-2258 | 4.3 | Aug 29 | Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications" Affected: 4.2.4; 4.2.5 |
| CVE-2016-7801 | 4.3 | Jun 9 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.1.0; 3.1.1; +21 more |
| CVE-2016-4910 | 4.3 | Jun 9 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operational administrators' MultiReport filters via unspecified… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.1.0; 3.1.1; +21 more |
| CVE-2016-4909 | 4.3 | Jun 9 | Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the authentication of a logged in user to force a logout via… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.1.0; 3.1.1; +21 more |
| CVE-2016-4908 | 4.3 | Jun 9 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unspecified vectors Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.1.0; 3.1.1; +21 more |
| CVE-2017-2095 | 4.3 | Apr 28 | Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.1.0; 3.1.1; +22 more |
| CVE-2017-2094 | 4.3 | Apr 28 | Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.1.0; 3.1.1; +22 more |
| CVE-2017-2093 | 4.3 | Apr 28 | Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.1.0; 3.1.1; +22 more |
| CVE-2017-2091 | 4.3 | Apr 28 | Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.1.0; 3.1.1; +22 more |
| CVE-2016-1220 | 4.3 | Apr 20 | Cybozu Garoon before 4.2.2 does not properly restrict access Affected: through 4.2.1 |
| CVE-2016-1196 | 4.3 | Jun 19 | Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.1.0; 3.1.1; +19 more |
| CVE-2016-1192 | 4.3 | Jun 19 | Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors Affected: 3.7.0; 3.7.1; 3.7.2; 3.7.3; 3.7.4; 3.7.5; +5 more |
| CVE-2015-7776 | 4.3 | Jun 19 | Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.1.0; 3.1.1; +18 more |
| CVE-2021-20761 | 2.7 | Aug 18 | Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker with an administrative privilege to alter the data of E-mail without the… Affected: 4.0.0 through 5.0.2 |