# Cybozu, Inc Cybozu Garoon.

Every CVE that names Cybozu, Inc Cybozu Garoon among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Cross-site scripting in Cybozu, Inc Cybozu Garoon](https://agentprime.io/advisories/CVE-2026-57279.md)
  `CVE-2026-57279` · CVE record: Cybozu, Inc Cybozu Garoon · CVSS 6.0 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Cross-site scripting (XSS)
- [Cybozu, Inc. Cybozu Garoon: Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3…](https://agentprime.io/advisories/CVE-2026-22888.md)
  `CVE-2026-22888` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 6.9 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-231
- [Cross-site scripting in Cybozu, Inc. Cybozu Garoon](https://agentprime.io/advisories/CVE-2026-22881.md)
  `CVE-2026-22881` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 6.8 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Cybozu, Inc. Cybozu Garoon](https://agentprime.io/advisories/CVE-2026-20711.md)
  `CVE-2026-20711` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 6.9 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Cybozu, Inc. Cybozu Garoon](https://agentprime.io/advisories/CVE-2024-39457.md)
  `CVE-2024-39457` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 5.4 Medium · Not analysed yet · Published 19 Jul 2024 · Tags: Cross-site scripting (XSS)
- [Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2.](https://agentprime.io/advisories/CVE-2024-31397.md)
  `CVE-2024-31397` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 4.9 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-231
- [Uncontrolled resource consumption in Cybozu, Inc. Cybozu Garoon](https://agentprime.io/advisories/CVE-2024-31399.md)
  `CVE-2024-31399` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 5.3 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: Denial of service
- [Incorrect authorization in Cybozu, Inc. Cybozu Garoon](https://agentprime.io/advisories/CVE-2024-31402.md)
  `CVE-2024-31402` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 4.3 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: Broken access control
- [Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.2.](https://agentprime.io/advisories/CVE-2024-31398.md)
  `CVE-2024-31398` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 4.3 Medium · Not analysed yet · Published 11 Jun 2024
- [Insecure storage of sensitive information in Cybozu, Inc. Cybozu Garoon](https://agentprime.io/advisories/CVE-2024-31404.md)
  `CVE-2024-31404` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 4.3 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: Information disclosure
- [Incorrect authorization in Cybozu, Inc. Cybozu Garoon](https://agentprime.io/advisories/CVE-2024-31403.md)
  `CVE-2024-31403` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 5.4 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: Broken access control
- [Cross-site scripting in Cybozu, Inc. Cybozu Garoon](https://agentprime.io/advisories/CVE-2024-31401.md)
  `CVE-2024-31401` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jun 2024 · Tags: Cross-site scripting (XSS)
- [Insecure storage of sensitive information in Cybozu, Inc. Cybozu Garoon](https://agentprime.io/advisories/CVE-2024-31400.md)
  `CVE-2024-31400` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 6.5 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: Information disclosure
- [Incorrect authorization in Cybozu, Inc. Cybozu Garoon](https://agentprime.io/advisories/CVE-2023-27384.md)
  `CVE-2023-27384` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 23 May 2023 · Tags: Broken access control
- [Missing authorization in Cybozu, Inc. Cybozu Garoon](https://agentprime.io/advisories/CVE-2023-27304.md)
  `CVE-2023-27304` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 23 May 2023 · Tags: Broken access control
- [Cybozu, Inc. Cybozu Garoon: Denial-of-service (DoS) vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows…](https://agentprime.io/advisories/CVE-2023-26595.md)
  `CVE-2023-26595` · CVE record: Cybozu, Inc. Cybozu Garoon · CVSS 5.5 Medium · Not analysed yet · Published 23 May 2023
- [Cybozu, Inc. Cybozu Garoon: Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows…](https://agentprime.io/advisories/CVE-2022-31472.md)
  `CVE-2022-31472` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1…](https://agentprime.io/advisories/CVE-2022-30943.md)
  `CVE-2022-30943` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1…](https://agentprime.io/advisories/CVE-2022-30602.md)
  `CVE-2022-30602` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Exposure of sensitive information to an unauthorized actor issue in multiple applications…](https://agentprime.io/advisories/CVE-2022-29512.md)
  `CVE-2022-29512` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 11 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a…](https://agentprime.io/advisories/CVE-2022-29892.md)
  `CVE-2022-29892` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a…](https://agentprime.io/advisories/CVE-2022-29513.md)
  `CVE-2022-29513` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0…](https://agentprime.io/advisories/CVE-2022-29484.md)
  `CVE-2022-29484` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Browse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote…](https://agentprime.io/advisories/CVE-2022-29471.md)
  `CVE-2022-29471` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Address information disclosure vulnerability in Cybozu Garoon 4.2.0 to 5.5.1 allows a…](https://agentprime.io/advisories/CVE-2022-29467.md)
  `CVE-2022-29467` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1…](https://agentprime.io/advisories/CVE-2022-28718.md)
  `CVE-2022-28718` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1…](https://agentprime.io/advisories/CVE-2022-28713.md)
  `CVE-2022-28713` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1…](https://agentprime.io/advisories/CVE-2022-28692.md)
  `CVE-2022-28692` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a…](https://agentprime.io/advisories/CVE-2022-27807.md)
  `CVE-2022-27807` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a…](https://agentprime.io/advisories/CVE-2022-27803.md)
  `CVE-2022-27803` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1…](https://agentprime.io/advisories/CVE-2022-27661.md)
  `CVE-2022-27661` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2…](https://agentprime.io/advisories/CVE-2022-27627.md)
  `CVE-2022-27627` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of…](https://agentprime.io/advisories/CVE-2022-26368.md)
  `CVE-2022-26368` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows…](https://agentprime.io/advisories/CVE-2022-26054.md)
  `CVE-2022-26054` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1…](https://agentprime.io/advisories/CVE-2022-26051.md)
  `CVE-2022-26051` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 4 Jul 2022
- [Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0…](https://agentprime.io/advisories/CVE-2021-20775.md)
  `CVE-2021-20775` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in some functions of E-mail of Cybozu Garoon 4.0.0 to…](https://agentprime.io/advisories/CVE-2021-20774.md)
  `CVE-2021-20774` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: There is a vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.0…](https://agentprime.io/advisories/CVE-2021-20773.md)
  `CVE-2021-20773` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Information disclosure vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows…](https://agentprime.io/advisories/CVE-2021-20772.md)
  `CVE-2021-20772` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in some functions of E-Mail of Cybozu Garoon 4.0.0 to…](https://agentprime.io/advisories/CVE-2021-20771.md)
  `CVE-2021-20771` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Message of Cybozu Garoon 4.6.0 to 5.0.2 allows a…](https://agentprime.io/advisories/CVE-2021-20770.md)
  `CVE-2021-20770` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a…](https://agentprime.io/advisories/CVE-2021-20769.md)
  `CVE-2021-20769` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu…](https://agentprime.io/advisories/CVE-2021-20768.md)
  `CVE-2021-20768` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2…](https://agentprime.io/advisories/CVE-2021-20767.md)
  `CVE-2021-20767` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a…](https://agentprime.io/advisories/CVE-2021-20766.md)
  `CVE-2021-20766` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a…](https://agentprime.io/advisories/CVE-2021-20765.md)
  `CVE-2021-20765` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to…](https://agentprime.io/advisories/CVE-2021-20764.md)
  `CVE-2021-20764` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2…](https://agentprime.io/advisories/CVE-2021-20763.md)
  `CVE-2021-20763` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows…](https://agentprime.io/advisories/CVE-2021-20762.md)
  `CVE-2021-20762` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows…](https://agentprime.io/advisories/CVE-2021-20761.md)
  `CVE-2021-20761` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2…](https://agentprime.io/advisories/CVE-2021-20760.md)
  `CVE-2021-20760` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2…](https://agentprime.io/advisories/CVE-2021-20759.md)
  `CVE-2021-20759` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Cross-site request forgery (CSRF) vulnerability in Message of Cybozu Garoon 4.0.0 to…](https://agentprime.io/advisories/CVE-2021-20758.md)
  `CVE-2021-20758` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2…](https://agentprime.io/advisories/CVE-2021-20757.md)
  `CVE-2021-20757` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2…](https://agentprime.io/advisories/CVE-2021-20756.md)
  `CVE-2021-20756` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2…](https://agentprime.io/advisories/CVE-2021-20755.md)
  `CVE-2021-20755` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2…](https://agentprime.io/advisories/CVE-2021-20754.md)
  `CVE-2021-20754` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a…](https://agentprime.io/advisories/CVE-2021-20753.md)
  `CVE-2021-20753` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 18 Aug 2021
- [Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Cybozu Garoon 5.0.0 to 5.0.2 allows a remote…](https://agentprime.io/advisories/CVE-2020-5643.md)
  `CVE-2020-5643` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 6 Nov 2020
- [Cybozu, Inc. Cybozu Garoon: Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with…](https://agentprime.io/advisories/CVE-2020-5588.md)
  `CVE-2020-5588` · CVE record: Cybozu, Inc. Cybozu Garoon · No CVSS score · Not analysed yet · Published 30 Jun 2020

Older: <https://agentprime.io/advisories/technology/cybozu-inc-cybozu-garoon.md?cursor=WyIyMDIwLTA2LTMwVDEwOjIwOjQ0LjAwMDAwMFoiLCJDVkUtMjAyMC01NTg4Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cybozu-inc-cybozu-garoon>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cybozu-inc-cybozu-garoon/>. Everything for agents: <https://agentprime.io/llms.txt>.