Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cybozu garoon vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2018-0530
SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated malicious users to execute arbitrary SQL commands via unspecified vectors.
Cybozu Garoon
4.3
CVSSv3
CVE-2018-0548
Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated malicious users to bypass access restriction to view the closed title of "Space" via unspecified vectors.
Cybozu Garoon
5.4
CVSSv3
CVE-2018-0549
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated malicious users to inject arbitrary web script or HTML via unspecified vectors.
Cybozu Garoon
5.4
CVSSv3
CVE-2018-0551
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated malicious users to inject arbitrary web script or HTML via unspecified vectors.
Cybozu Garoon
8.1
CVSSv3
CVE-2018-0673
Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated malicious users to read arbitrary files via unspecified vectors.
Cybozu Garoon
4.9
CVSSv3
CVE-2020-5562
Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege to issue arbitrary HTTP requests to other web servers via V-CUBE Meeting function.
Cybozu Garoon
5.3
CVSSv3
CVE-2020-5563
Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote malicious users to obtain data in the affected product via the API.
Cybozu Garoon
6.1
CVSSv3
CVE-2020-5564
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote malicious users to inject arbitrary web script or HTML via the application 'E-mail'.
Cybozu Garoon
4.3
CVSSv3
CVE-2020-5565
Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated malicious user to alter the application's data via the applications 'Workflow' and 'MultiReport'.
Cybozu Garoon
7.5
CVSSv3
CVE-2020-5567
Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote malicious users to obtain data in Application Menu.
Cybozu Garoon
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-36954
CVE-2024-36933
CVE-2024-24919
CVE-2024-36923
CVE-2024-2961
CVE-2024-36925
bypass
encryption
command injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »