Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cybozu garoon 4.0.0 vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2020-5581
Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated malicious users to obtain unintended information via unspecified vectors.
Cybozu Garoon
8.7
CVSSv3
CVE-2019-5931
Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated malicious users to alter the information with privileges invoking the installer via unspecified vectors.
Cybozu Garoon
4.9
CVSSv3
CVE-2019-5976
Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via unspecified vectors.
Cybozu Garoon
4.3
CVSSv3
CVE-2022-27807
Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated malicious user to disable to add Categories.
Cybozu Garoon
5.3
CVSSv3
CVE-2020-5563
Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote malicious users to obtain data in the affected product via the API.
Cybozu Garoon
6.5
CVSSv3
CVE-2020-5583
Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated malicious users to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors.
Cybozu Garoon
7.6
CVSSv3
CVE-2019-5991
SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated malicious users to execute arbitrary SQL commands via unspecified vectors.
Cybozu Garoon
8.1
CVSSv3
CVE-2022-29484
Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a remote authenticated malicious user to delete the data of Space.
Cybozu Garoon
4.3
CVSSv3
CVE-2022-28692
Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated malicious user to alter the data of Scheduler.
Cybozu Garoon
4.3
CVSSv3
CVE-2022-28718
Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a remote authenticated malicious user to alter the data of Bulletin.
Cybozu Garoon
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33228
CVE-2024-20361
log injection
bypass
CVE-2024-4985
CVE-2024-35223
CVE-2024-29849
CVE-2024-31893
IMAP
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »