CY
Vendor
Cybozu
347
CVEs
0
On KEV
0
New 30D
Products
GA9.8
Garoon
Cybozu
198 CVEs0 on KEV0 new
OF8.8
Office
Cybozu
71 CVEs0 on KEV0 new
RS8.8
Remote Service Manager
Cybozu
22 CVEs0 on KEV0 new
MA7.5
Mailwise
Cybozu
14 CVEs0 on KEV0 new
CO–
Cybozu Office
Cybozu
7 CVEs0 on KEV0 new
DE9.1
Dezie
Cybozu
6 CVEs0 on KEV0 new
KU7.5
Kunai
Cybozu
6 CVEs0 on KEV0 new
CL–
Cybozu Live
Cybozu
4 CVEs0 on KEV0 new
KI5.9
Kintone
Cybozu
4 CVEs0 on KEV0 new
CO–
Collaborex
Cybozu
2 CVEs0 on KEV0 new
CD–
Cybozu Dezie
Cybozu
2 CVEs0 on KEV0 new
CR7.5
Cybozu Remote Service
Cybozu
2 CVEs0 on KEV0 new
CA–
Cybozu AG
Cybozu
1 CVEs0 on KEV0 new
CD–
Cybozu Dotsales
Cybozu
1 CVEs0 on KEV0 new
CG–
Cybozu Garoon
Cybozu
1 CVEs0 on KEV0 new
CP–
Cybozu Pocket
Cybozu
1 CVEs0 on KEV0 new
DE9.8
Desktop
Cybozu
1 CVEs0 on KEV0 new
G1–
Garoon 1
Cybozu
1 CVEs0 on KEV0 new
KB–
Kunai Browser For Remote Service
Cybozu
1 CVEs0 on KEV0 new
S3–
Share 360
Cybozu
1 CVEs0 on KEV0 new
SH–
Share360
Cybozu
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-22888 | GA Garoon Cybozu | 7.5 | Feb 2 | Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product |
| CVE-2026-22881 | GA Garoon Cybozu | 5.4 | Feb 2 | Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords |
| CVE-2026-20711 | GA Garoon Cybozu | 6.1 | Feb 2 | Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords |
| CVE-2024-39817 | OF Office Cybozu | 6.5 | Aug 6 | Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user… |
| CVE-2024-39457 | GA Garoon Cybozu | 5.4 | Jul 19 | Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview |
| CVE-2024-31402 | GA Garoon Cybozu | 4.3 | Jun 11 | Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker to delete the data of Shared To-Dos |
| CVE-2024-31399 | GA Garoon Cybozu | 6.5 | Jun 11 | Excessive platform resource consumption within a loop issue exists in Cybozu Garoon 5.0.0 to 5.15.2 |
| CVE-2024-31398 | GA Garoon Cybozu | 4.3 | Jun 11 | Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.2 |
| CVE-2024-31397 | GA Garoon Cybozu | 4.9 | Jun 11 | Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2 |
| CVE-2024-31404 | GA Garoon Cybozu | 4.3 | Jun 11 | Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.5.0 to 6.0.0, which may allow a user who can log in to the product to view the data of Scheduler |
| CVE-2024-31403 | GA Garoon Cybozu | 5.4 | Jun 11 | Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 6.0.0 allows a remote authenticated attacker to alter and/or obtain the data of Memo |
| CVE-2024-31401 | GA Garoon Cybozu | 9.0 | Jun 11 | Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script on the… |
| CVE-2024-31400 | GA Garoon Cybozu | 6.5 | Jun 11 | Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.0 |
| CVE-2024-23304 | KU Kunai Cybozu | 7.5 | Feb 6 | Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by performing certain operations |
| CVE-2023-46278 | CR Cybozu Remote Service Cybozu | 6.5 | Nov 1 | Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated attacker to consume huge storage space or cause significantly… |
| CVE-2022-26838 | RS Remote Service Manager Cybozu | 6.5 | Aug 3 | Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause a denial-of-service (DoS) condition |
| CVE-2023-27384 | GA Garoon Cybozu | 4.3 | May 23 | Operation restriction bypass vulnerability in MultiReport of Cybozu Garoon 5.15.0 allows a remote authenticated attacker to alter the data of MultiReport |
| CVE-2023-27304 | GA Garoon Cybozu | 4.3 | May 23 | Operation restriction bypass vulnerability in Message and Bulletin of Cybozu Garoon 4.6.0 to 5.9.2 allows a remote authenticated attacker to alter the data of Message and/or… |
| CVE-2023-26595 | GA Garoon Cybozu | 6.5 | May 23 | Denial-of-service (DoS) vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows a remote authenticated attacker to cause a denial of service condition |
| CVE-2022-44608 | CR Cybozu Remote Service Cybozu | 7.5 | Dec 7 | Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a… |
| CVE-2022-33311 | OF Office Cybozu | 4.3 | Aug 18 | Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified… |
| CVE-2022-33151 | OF Office Cybozu | 6.1 | Aug 18 | Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows remote attackers to inject an arbitrary script via unspecified vectors |
| CVE-2022-32583 | OF Office Cybozu | 4.3 | Aug 18 | Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Scheduler via unspecified… |
| CVE-2022-32544 | OF Office Cybozu | 4.3 | Aug 18 | Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Project via unspecified vectors |
| CVE-2022-32453 | OF Office Cybozu | 6.5 | Aug 18 | HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors |
| CVE-2022-32283 | OF Office Cybozu | 4.3 | Aug 18 | Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Cabinet via unspecified vectors |
| CVE-2022-30693 | OF Office Cybozu | 5.3 | Aug 18 | Information disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to obtain the data of the product via unspecified… |
| CVE-2022-30604 | OF Office Cybozu | 6.1 | Aug 18 | Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors |
| CVE-2022-29891 | OF Office Cybozu | 4.3 | Aug 18 | Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Custom App via unspecified… |
| CVE-2022-29487 | OF Office Cybozu | 6.1 | Aug 18 | Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors |
| CVE-2022-28715 | OF Office Cybozu | 6.1 | Aug 18 | Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors |
| CVE-2022-25986 | OF Office Cybozu | 4.3 | Aug 18 | Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler |
| CVE-2022-31472 | GA Garoon Cybozu | 4.3 | Jul 11 | Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to obtain the data of Cabinet |
| CVE-2022-30943 | GA Garoon Cybozu | 4.3 | Jul 11 | Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data of Bulletin |
| CVE-2022-30602 | GA Garoon Cybozu | 8.1 | Jul 11 | Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to alter the file information and/or delete the files |
| CVE-2022-29512 | GA Garoon Cybozu | 6.5 | Jul 11 | Exposure of sensitive information to an unauthorized actor issue in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data… |
| CVE-2022-29892 | GA Garoon Cybozu | 6.5 | Jul 4 | Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to repeatedly display errors in certain functions and cause… |
| CVE-2022-29513 | GA Garoon Cybozu | 4.8 | Jul 4 | Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary… |
| CVE-2022-29484 | GA Garoon Cybozu | 8.1 | Jul 4 | Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a remote authenticated attacker to delete the data of Space |
| CVE-2022-29471 | GA Garoon Cybozu | 4.3 | Jul 4 | Browse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote authenticated attacker to obtain the data of Bulletin |
| CVE-2022-29467 | GA Garoon Cybozu | 4.3 | Jul 4 | Address information disclosure vulnerability in Cybozu Garoon 4.2.0 to 5.5.1 allows a remote authenticated attacker to obtain some data of Address |
| CVE-2022-28718 | GA Garoon Cybozu | 4.3 | Jul 4 | Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a remote authenticated attacker to alter the data of Bulletin |
| CVE-2022-28713 | GA Garoon Cybozu | 5.3 | Jul 4 | Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the… |
| CVE-2022-28692 | GA Garoon Cybozu | 4.3 | Jul 4 | Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Scheduler |
| CVE-2022-27807 | GA Garoon Cybozu | 4.3 | Jul 4 | Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to disable to add Categories |
| CVE-2022-27803 | GA Garoon Cybozu | 4.3 | Jul 4 | Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space |
| CVE-2022-27661 | GA Garoon Cybozu | 4.3 | Jul 4 | Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Workflow |
| CVE-2022-27627 | GA Garoon Cybozu | 6.1 | Jul 4 | Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbitrary script on the logged-in user's… |
| CVE-2022-26368 | GA Garoon Cybozu | 5.4 | Jul 4 | Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter and/or obtain… |
| CVE-2022-26054 | GA Garoon Cybozu | 4.3 | Jul 4 | Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Link |
| CVE-2022-26051 | GA Garoon Cybozu | 4.3 | Jul 4 | Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Portal |
| CVE-2021-20807 | RS Remote Service Manager Cybozu | 6.1 | Oct 13 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors |
| CVE-2021-20806 | RS Remote Service Manager Cybozu | 6.1 | Oct 13 | Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified… |
| CVE-2021-20805 | RS Remote Service Manager Cybozu | 5.4 | Oct 13 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via… |
| CVE-2021-20804 | RS Remote Service Manager Cybozu | 6.5 | Oct 13 | Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of service (DoS) condition via unspecified vectors |
| CVE-2021-20803 | RS Remote Service Manager Cybozu | 5.4 | Oct 13 | Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen |
| CVE-2021-20802 | RS Remote Service Manager Cybozu | 5.3 | Oct 13 | HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the product |
| CVE-2021-20801 | RS Remote Service Manager Cybozu | 6.5 | Oct 13 | Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity (XXE) attacks and obtain the information stored in the product via… |
| CVE-2021-20800 | RS Remote Service Manager Cybozu | 5.4 | Oct 13 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified… |
| CVE-2021-20799 | RS Remote Service Manager Cybozu | 5.4 | Oct 13 | Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via… |