Known vulnerabilities in Cybozu Garoon

Vendor: Cybozu
Software: Cybozu Garoon
Software CPE: cpe:2.3:a:cybozu:cybozu_garoon:*:*:*:*:*:*:*:*
Website: https://cybozu-global.com/
Total vulnerabilities: 101
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cybozu Garoon Cybozu Garoon is affected by 101 known vulnerabilities: 1 high, 25 medium, 75 low Critical High Medium Low

Vulnerabilities (101)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140845 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-57279		 CWE-79 Low
No
No
 6.17.2 04.08.2026 SB2026080411
#VU122223 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 6.17.0 02.02.2026 SB2026020273
#VU122222 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-22881		 CWE-79 Low
No
No
 6.17.0 02.02.2026 SB2026020273
#VU122206 - Improper Handling of Extra Values
CVE-2026-22888		 CWE-231 Low
No
No
 6.17.0 02.02.2026 SB2026020273
#VU122168 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-20711		 CWE-79 Low
No
No
 6.17.0 02.02.2026 SB2026020273
#VU94369 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-39457		 CWE-79 Low
No
No
 6.0.2 16.07.2024 SB2024071630
#VU89370 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31404		 CWE-200 Low
No
No
 6.0 Service Pack 1 13.05.2024 SB2024051309
#VU89369 - Incorrect Authorization
CVE-2024-31403		 CWE-863 Medium
No
No
 6.0 Service Pack 1 13.05.2024 SB2024051309
#VU89368 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31400		 CWE-200 Low
No
No
 6.0.0 13.05.2024 SB2024051308
#VU89367 - Incorrect Authorization
CVE-2024-31402		 CWE-863 Low
No
No
 6.0.0 13.05.2024 SB2024051308
#VU89366 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-31401		 CWE-79 Low
No
No
 6.0.0 13.05.2024 SB2024051308
#VU89365 - Resource exhaustion
CVE-2024-31399		 CWE-400 Low
No
No
 6.0.0 13.05.2024 SB2024051308
#VU89363 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31398		 CWE-200 Low
No
No
 6.0.0 13.05.2024 SB2024051308
#VU89362 - Improper Handling of Extra Values
CVE-2024-31397		 CWE-231 Low
No
No
 6.0.0 13.05.2024 SB2024051308
#VU76129 - Improper Access Control
CVE-2023-27384		 CWE-284 Low
No
No
 5.15 Service Pack 1 15.05.2023 SB2023051507
#VU76126 - Improper Authorization
CVE-2023-27304		 CWE-285 Low
No
No
 5.15.0 15.05.2023 SB2023051506
#VU76125 - Resource exhaustion
CVE-2023-26595		 CWE-400 Medium
No
No
 5.15.0 15.05.2023 SB2023051506
#VU64869 - Improper input validation
CVE-2022-29926		 CWE-20 Medium
No
No
 5.9 Service Pack 2 04.07.2022 SB2022070402
#VU64868 - Exposure of sensitive information to an unauthorized actor
CVE-2022-29512		 CWE-200 Low
No
No
 5.9 Service Pack 2 04.07.2022 SB2022070402
#VU64867 - Improper Authorization
CVE-2022-30602		 CWE-285 Medium
No
No
 5.9 Service Pack 2 04.07.2022 SB2022070402


Showing elements 1 - 20 out of 101