Advisories · Technology

Cybozu, Inc Cybozu Garoon.

Every CVE that names Cybozu, Inc Cybozu Garoon among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-57279 CVE record

CVSS 6.0 Medium

Cross-site scripting in Cybozu, Inc Cybozu Garoon
- Cybozu, Inc Cybozu Garoon
- Cross-site scripting (XSS)
Not analysed yet 10 Aug 2026
CVE-2026-22888 CVE record

CVSS 6.9 Medium

Cybozu, Inc. Cybozu Garoon: Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3…
- Cybozu, Inc. Cybozu Garoon
- CWE-231
Not analysed yet 2 Feb 2026
CVE-2026-22881 CVE record

CVSS 6.8 Medium

Cross-site scripting in Cybozu, Inc. Cybozu Garoon
- Cybozu, Inc. Cybozu Garoon
- Cross-site scripting (XSS)
Not analysed yet 2 Feb 2026
CVE-2026-20711 CVE record

CVSS 6.9 Medium

Cross-site scripting in Cybozu, Inc. Cybozu Garoon
- Cybozu, Inc. Cybozu Garoon
- Cross-site scripting (XSS)
Not analysed yet 2 Feb 2026
CVE-2024-39457 CVE record

CVSS 5.4 Medium

Cross-site scripting in Cybozu, Inc. Cybozu Garoon
- Cybozu, Inc. Cybozu Garoon
- Cross-site scripting (XSS)
Not analysed yet 19 Jul 2024
CVE-2024-31397 CVE record

CVSS 4.9 Medium

Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2.
- Cybozu, Inc. Cybozu Garoon
- CWE-231
Not analysed yet 11 Jun 2024
CVE-2024-31399 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in Cybozu, Inc. Cybozu Garoon
- Cybozu, Inc. Cybozu Garoon
- Denial of service
Not analysed yet 11 Jun 2024
CVE-2024-31402 CVE record

CVSS 4.3 Medium

Incorrect authorization in Cybozu, Inc. Cybozu Garoon
- Cybozu, Inc. Cybozu Garoon
- Broken access control
Not analysed yet 11 Jun 2024
CVE-2024-31398 CVE record

CVSS 4.3 Medium

Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.2.
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 11 Jun 2024
CVE-2024-31404 CVE record

CVSS 4.3 Medium

Insecure storage of sensitive information in Cybozu, Inc. Cybozu Garoon
- Cybozu, Inc. Cybozu Garoon
- Information disclosure
Not analysed yet 11 Jun 2024
CVE-2024-31403 CVE record

CVSS 5.4 Medium

Incorrect authorization in Cybozu, Inc. Cybozu Garoon
- Cybozu, Inc. Cybozu Garoon
- Broken access control
Not analysed yet 11 Jun 2024
CVE-2024-31401 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Cross-site scripting in Cybozu, Inc. Cybozu Garoon
- Cybozu, Inc. Cybozu Garoon
- Cross-site scripting (XSS)
Not analysed yet 11 Jun 2024
CVE-2024-31400 CVE record

CVSS 6.5 Medium

Insecure storage of sensitive information in Cybozu, Inc. Cybozu Garoon
- Cybozu, Inc. Cybozu Garoon
- Information disclosure
Not analysed yet 11 Jun 2024
CVE-2023-27384 CVE record

Incorrect authorization in Cybozu, Inc. Cybozu Garoon
- Cybozu, Inc. Cybozu Garoon
- Broken access control
Not analysed yet 23 May 2023
CVE-2023-27304 CVE record

Missing authorization in Cybozu, Inc. Cybozu Garoon
- Cybozu, Inc. Cybozu Garoon
- Broken access control
Not analysed yet 23 May 2023
CVE-2023-26595 CVE record

CVSS 5.5 Medium

Cybozu, Inc. Cybozu Garoon: Denial-of-service (DoS) vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 23 May 2023
CVE-2022-31472 CVE record

Cybozu, Inc. Cybozu Garoon: Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 11 Jul 2022
CVE-2022-30943 CVE record

Cybozu, Inc. Cybozu Garoon: Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 11 Jul 2022
CVE-2022-30602 CVE record

Cybozu, Inc. Cybozu Garoon: Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 11 Jul 2022
CVE-2022-29512 CVE record

Cybozu, Inc. Cybozu Garoon: Exposure of sensitive information to an unauthorized actor issue in multiple applications…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 11 Jul 2022
CVE-2022-29892 CVE record

Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-29513 CVE record

Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-29484 CVE record

Cybozu, Inc. Cybozu Garoon: Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-29471 CVE record

Cybozu, Inc. Cybozu Garoon: Browse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-29467 CVE record

Cybozu, Inc. Cybozu Garoon: Address information disclosure vulnerability in Cybozu Garoon 4.2.0 to 5.5.1 allows a…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-28718 CVE record

Cybozu, Inc. Cybozu Garoon: Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-28713 CVE record

Cybozu, Inc. Cybozu Garoon: Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-28692 CVE record

Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-27807 CVE record

Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-27803 CVE record

Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-27661 CVE record

Cybozu, Inc. Cybozu Garoon: Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-27627 CVE record

Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-26368 CVE record

Cybozu, Inc. Cybozu Garoon: Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-26054 CVE record

Cybozu, Inc. Cybozu Garoon: Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2022-26051 CVE record

Cybozu, Inc. Cybozu Garoon: Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 4 Jul 2022
CVE-2021-20775 CVE record

Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20774 CVE record

Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in some functions of E-mail of Cybozu Garoon 4.0.0 to…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20773 CVE record

Cybozu, Inc. Cybozu Garoon: There is a vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.0…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20772 CVE record

Cybozu, Inc. Cybozu Garoon: Information disclosure vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20771 CVE record

Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in some functions of E-Mail of Cybozu Garoon 4.0.0 to…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20770 CVE record

Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Message of Cybozu Garoon 4.6.0 to 5.0.2 allows a…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20769 CVE record

Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20768 CVE record

Cybozu, Inc. Cybozu Garoon: Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20767 CVE record

Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20766 CVE record

Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20765 CVE record

Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20764 CVE record

Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20763 CVE record

Cybozu, Inc. Cybozu Garoon: Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20762 CVE record

Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20761 CVE record

Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20760 CVE record

Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20759 CVE record

Cybozu, Inc. Cybozu Garoon: Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20758 CVE record

Cybozu, Inc. Cybozu Garoon: Cross-site request forgery (CSRF) vulnerability in Message of Cybozu Garoon 4.0.0 to…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20757 CVE record

Cybozu, Inc. Cybozu Garoon: Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20756 CVE record

Cybozu, Inc. Cybozu Garoon: Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20755 CVE record

Cybozu, Inc. Cybozu Garoon: Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20754 CVE record

Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2021-20753 CVE record

Cybozu, Inc. Cybozu Garoon: Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 18 Aug 2021
CVE-2020-5643 CVE record

Cybozu, Inc. Cybozu Garoon: Improper input validation vulnerability in Cybozu Garoon 5.0.0 to 5.0.2 allows a remote…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 6 Nov 2020
CVE-2020-5588 CVE record

Cybozu, Inc. Cybozu Garoon: Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with…
- Cybozu, Inc. Cybozu Garoon
Not analysed yet 30 Jun 2020