Vendor CVEs

Cybozu

All CVEs

331 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-4906	Cybozu Garoon	Med	0.40	6.1	0.01	Jun 9, 2017	Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai.
CVE-2016-1217	Cybozu Garoon	Med	0.40	6.1	0.01	Apr 20, 2017	Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2.
CVE-2016-1216	Cybozu Garoon	Med	0.40	6.1	0.01	Apr 20, 2017	Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2.
CVE-2016-1215	Cybozu Garoon	Med	0.40	6.1	0.01	Apr 20, 2017	Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2.
CVE-2016-1214	Cybozu Garoon	Med	0.40	6.1	0.01	Apr 20, 2017	Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2.
CVE-2016-1213	Cybozu Garoon	Med	0.40	6.1	0.01	Apr 20, 2017	The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites.
CVE-2016-1197	Cybozu Garoon	Med	0.40	6.1	0.01	Jun 19, 2016	Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775.
CVE-2016-1150	Cybozu Office	Med	0.40	6.1	0.01	Feb 17, 2016	Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, and CVE-2016-1149.
CVE-2016-1149	Cybozu Office	Med	0.40	6.1	0.01	Feb 17, 2016	Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, and CVE-2016-1150.
CVE-2015-7798	Cybozu Office	Med	0.40	6.1	0.01	Feb 17, 2016	Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2016-1149, and CVE-2016-1150.
CVE-2015-7797	Cybozu Office	Med	0.40	6.1	0.01	Feb 17, 2016	Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150.
CVE-2015-7796	Cybozu Office	Med	0.40	6.1	0.01	Feb 17, 2016	Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150.
CVE-2015-7795	Cybozu Office	Med	0.40	6.1	0.01	Feb 17, 2016	Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150.
CVE-2016-7816	Cybozu Kintone	Med	0.38	5.9	0.01	Jun 9, 2017	The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2016-1186	Kintone Kintone mobile	Med	0.38	5.9	0.01	Apr 21, 2017	Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates.
CVE-2026-22881	Cybozu Garoon	Med	0.35	5.4	0.00	Feb 2, 2026	Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.
CVE-2024-39457	Cybozu Garoon	Med	0.35	5.4	0.00	Jul 19, 2024	Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user’s web browser.
CVE-2024-31403	Cybozu Garoon	Med	0.35	5.4	0.00	Jun 11, 2024	Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 6.0.0 allows a remote authenticated attacker to alter and/or obtain the data of Memo.
CVE-2022-30693	Cybozu Office	Med	0.35	5.3	0.01	Aug 18, 2022	Information disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to obtain the data of the product via unspecified vectors.
CVE-2022-28713	Cybozu Garoon	Med	0.35	5.3	0.01	Jul 4, 2022	Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the product.
CVE-2022-26368	Cybozu Garoon	Med	0.35	5.4	0.01	Jul 4, 2022	Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter and/or obtain the data of Cabinet.
CVE-2021-20805	Cybozu Cybozu Remote Service	Med	0.35	5.4	0.01	Oct 13, 2021	Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20803	Cybozu Cybozu Remote Service	Med	0.35	5.4	0.01	Oct 13, 2021	Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen.
CVE-2021-20802	Cybozu Cybozu Remote Service	Med	0.35	5.3	0.01	Oct 13, 2021	HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the product.
CVE-2021-20800	Cybozu Cybozu Remote Service	Med	0.35	5.4	0.01	Oct 13, 2021	Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20799	Cybozu Cybozu Remote Service	Med	0.35	5.4	0.01	Oct 13, 2021	Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20798	Cybozu Cybozu Remote Service	Med	0.35	5.4	0.01	Oct 13, 2021	Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20797	Cybozu Cybozu Remote Service	Med	0.35	5.4	0.01	Oct 13, 2021	Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox.
CVE-2021-20774	Cybozu Garoon	Med	0.35	5.4	0.01	Aug 18, 2021	Cross-site scripting vulnerability in some functions of E-mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20770	Cybozu Garoon	Med	0.35	5.4	0.01	Aug 18, 2021	Cross-site scripting vulnerability in Message of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20769	Cybozu Garoon	Med	0.35	5.4	0.01	Aug 18, 2021	Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20767	Cybozu Garoon	Med	0.35	5.4	0.01	Aug 18, 2021	Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20764	Cybozu Garoon	Med	0.35	5.3	0.01	Aug 18, 2021	Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Attaching Files.
CVE-2021-20753	Cybozu Garoon	Med	0.35	5.4	0.01	Aug 18, 2021	Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2020-5563	Cybozu Garoon	Med	0.35	5.3	0.01	Apr 28, 2020	Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the affected product via the API.
CVE-2019-5975	Cybozu Garoon	Med	0.35	5.4	0.01	Sep 12, 2019	DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2019-5947	Cybozu Garoon	Med	0.35	5.4	0.01	May 17, 2019	Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Cabinet'.
CVE-2019-5937	Cybozu Garoon	Med	0.35	5.4	0.01	May 17, 2019	Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the user information.
CVE-2019-5936	Cybozu Garoon	Med	0.35	5.4	0.02	May 17, 2019	Directory traversal vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to obtain files without access privileges via the application 'Work Flow'.
CVE-2018-0551	Cybozu Garoon	Med	0.35	5.4	0.01	Apr 16, 2018	Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2018-0549	Cybozu Garoon	Med	0.35	5.4	0.01	Apr 16, 2018	Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2017-2256	Cybozu Garoon	Med	0.35	5.4	0.01	Aug 29, 2017	Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo".
CVE-2017-2255	Cybozu Garoon	Med	0.35	5.4	0.01	Aug 29, 2017	Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space".
CVE-2017-2145	Cybozu Garoon	Med	0.35	5.4	0.01	Jul 7, 2017	Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors.
CVE-2017-2144	Cybozu Garoon	Med	0.35	5.4	0.01	Jul 7, 2017	Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page.
CVE-2016-7832	Cybozu Dezie	Med	0.35	5.3	0.02	Jun 9, 2017	Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors.
CVE-2017-2114	Cybozu Office	Med	0.35	5.4	0.01	Apr 28, 2017	Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2017-2092	Cybozu Garoon	Med	0.35	5.4	0.01	Apr 28, 2017	Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-4870	Cybozu Office	Med	0.35	5.4	0.01	Apr 17, 2017	Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the Schedule function.
CVE-2016-1191	Cybozu Garoon	Med	0.35	5.3	0.02	Jun 19, 2016	Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors.

CVE-2016-4906MedJun 9, 2017
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai.
CVE-2016-1217MedApr 20, 2017
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2.
CVE-2016-1216MedApr 20, 2017
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2.
CVE-2016-1215MedApr 20, 2017
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2.
CVE-2016-1214MedApr 20, 2017
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2.
CVE-2016-1213MedApr 20, 2017
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites.
CVE-2016-1197MedJun 19, 2016
Cybozu
Garoon
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775.
CVE-2016-1150MedFeb 17, 2016
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, and CVE-2016-1149.
CVE-2016-1149MedFeb 17, 2016
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, and CVE-2016-1150.
CVE-2015-7798MedFeb 17, 2016
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7797, CVE-2016-1149, and CVE-2016-1150.
CVE-2015-7797MedFeb 17, 2016
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7796, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150.
CVE-2015-7796MedFeb 17, 2016
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7795, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150.
CVE-2015-7795MedFeb 17, 2016
Cybozu
Office
risk 0.40cvss 6.1epss 0.01
Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7796, CVE-2015-7797, CVE-2015-7798, CVE-2016-1149, and CVE-2016-1150.
CVE-2016-7816MedJun 9, 2017
Cybozu
Kintone
risk 0.38cvss 5.9epss 0.01
The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2016-1186MedApr 21, 2017
Kintone
Kintone mobile
risk 0.38cvss 5.9epss 0.01
Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates.
CVE-2026-22881MedFeb 2, 2026
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.00
Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.
CVE-2024-39457MedJul 19, 2024
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.00
Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user’s web browser.
CVE-2024-31403MedJun 11, 2024
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.00
Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 6.0.0 allows a remote authenticated attacker to alter and/or obtain the data of Memo.
CVE-2022-30693MedAug 18, 2022
Cybozu
Office
risk 0.35cvss 5.3epss 0.01
Information disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to obtain the data of the product via unspecified vectors.
CVE-2022-28713MedJul 4, 2022
Cybozu
Garoon
risk 0.35cvss 5.3epss 0.01
Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the product.
CVE-2022-26368MedJul 4, 2022
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter and/or obtain the data of Cabinet.
CVE-2021-20805MedOct 13, 2021
Cybozu
Cybozu Remote Service
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20803MedOct 13, 2021
Cybozu
Cybozu Remote Service
risk 0.35cvss 5.4epss 0.01
Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen.
CVE-2021-20802MedOct 13, 2021
Cybozu
Cybozu Remote Service
risk 0.35cvss 5.3epss 0.01
HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the product.
CVE-2021-20800MedOct 13, 2021
Cybozu
Cybozu Remote Service
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20799MedOct 13, 2021
Cybozu
Cybozu Remote Service
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20798MedOct 13, 2021
Cybozu
Cybozu Remote Service
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20797MedOct 13, 2021
Cybozu
Cybozu Remote Service
risk 0.35cvss 5.4epss 0.01
Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox.
CVE-2021-20774MedAug 18, 2021
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in some functions of E-mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20770MedAug 18, 2021
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Message of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20769MedAug 18, 2021
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20767MedAug 18, 2021
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2021-20764MedAug 18, 2021
Cybozu
Garoon
risk 0.35cvss 5.3epss 0.01
Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Attaching Files.
CVE-2021-20753MedAug 18, 2021
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVE-2020-5563MedApr 28, 2020
Cybozu
Garoon
risk 0.35cvss 5.3epss 0.01
Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the affected product via the API.
CVE-2019-5975MedSep 12, 2019
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2019-5947MedMay 17, 2019
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Cabinet'.
CVE-2019-5937MedMay 17, 2019
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the user information.
CVE-2019-5936MedMay 17, 2019
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.02
Directory traversal vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to obtain files without access privileges via the application 'Work Flow'.
CVE-2018-0551MedApr 16, 2018
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2018-0549MedApr 16, 2018
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2017-2256MedAug 29, 2017
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo".
CVE-2017-2255MedAug 29, 2017
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space".
CVE-2017-2145MedJul 7, 2017
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors.
CVE-2017-2144MedJul 7, 2017
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page.
CVE-2016-7832MedJun 9, 2017
Cybozu
Dezie
risk 0.35cvss 5.3epss 0.02
Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors.
CVE-2017-2114MedApr 28, 2017
Cybozu
Office
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2017-2092MedApr 28, 2017
Cybozu
Garoon
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-4870MedApr 17, 2017
Cybozu
Office
risk 0.35cvss 5.4epss 0.01
Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the Schedule function.
CVE-2016-1191MedJun 19, 2016
Cybozu
Garoon
risk 0.35cvss 5.3epss 0.02
Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors.

Page 3 of 7