Known vulnerabilities in Cybozu Garoon - page 4

Vendor: Cybozu
Software: Cybozu Garoon
Software CPE: cpe:2.3:a:cybozu:cybozu_garoon:*:*:*:*:*:*:*:*
Website: https://cybozu-global.com/
Total vulnerabilities: 101
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cybozu Garoon Cybozu Garoon is affected by 101 known vulnerabilities: 1 high, 25 medium, 75 low Critical High Medium Low

Vulnerabilities (101)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29350 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5588		 CWE-22 Low
No
No
 5.0 SP 2 29.06.2020 SB2020062905
#VU29349 - Exposure of sensitive information to an unauthorized actor
CVE-2020-5587		 CWE-200 Medium
No
No
 5.0 SP 2 29.06.2020 SB2020062905
#VU29348 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5586		 CWE-79 Low
No
No
 5.0 SP 2 29.06.2020 SB2020062905
#VU29347 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5585		 CWE-79 Low
No
No
 5.0 SP 2 29.06.2020 SB2020062905
#VU29346 - Exposure of sensitive information to an unauthorized actor
CVE-2020-5584		 CWE-200 Medium
No
No
 5.0 SP 2 29.06.2020 SB2020062905
#VU29345 - Permissions, Privileges, and Access Controls
CVE-2020-5583		 CWE-264 Low
No
No
 5.0 SP 2 29.06.2020 SB2020062905
#VU29344 - Permissions, Privileges, and Access Controls
CVE-2020-5582		 CWE-264 Low
No
No
 5.0 SP 2 29.06.2020 SB2020062905
#VU29343 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5581		 CWE-22 Medium
No
No
 5.0 SP 2 29.06.2020 SB2020062905
#VU29342 - Exposure of sensitive information to an unauthorized actor
CVE-2020-5580		 CWE-200 Medium
No
No
 5.0 SP 2 29.06.2020 SB2020062905
#VU27342 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5568		 CWE-79 Low
No
No
 5.0 SP1 27.04.2020 SB2020042710
#VU27340 - Improper Authentication
CVE-2020-5567		 CWE-287 Medium
No
No
 5.0.0 27.04.2020 SB2020042709
#VU27337 - Improper Authorization
CVE-2020-5566		 CWE-285 Low
No
No
 5.0.0 27.04.2020 SB2020042709
#VU27335 - Improper input validation
CVE-2020-5565		 CWE-20 Low
No
No
 5.0.0 27.04.2020 SB2020042709
#VU27332 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5564		 CWE-79 Low
No
No
 5.0.0 27.04.2020 SB2020042709
#VU27331 - Improper Authentication
CVE-2020-5563		 CWE-287 Medium
No
No
 5.0.0 27.04.2020 SB2020042709
#VU20402 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 High
No
No
 - 27.08.2019 SB2019082701
#VU19237 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-5978		 CWE-601 Low
No
No
 4.10.3 18.07.2019 SB2019071806
#VU19236 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-5977		 CWE-74 Low
No
No
 4.10.3 18.07.2019 SB2019071806
#VU19235 - Improper input validation
CVE-2019-5976		 CWE-20 Medium
No
No
 4.10.3 18.07.2019 SB2019071806
#VU19234 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-5975		 CWE-79 Low
No
No
 4.10.3 18.07.2019 SB2019071806


Showing elements 61 - 80 out of 101