CVE-2023-27384

CVE-2023-27384 affects Cybozu Garoon, specifically the MultiReport component. The vulnerability is an operation restriction bypass in MultiReport that can allow a remote authenticated attacker to alter MultiReport data. Reported impact documents consistently list data integrity changes as the pra...

CVE-2023-27304

The CVE-2023-27304 entry concerns Cybozu Garoon. Affected versions range from 4.6.0 to 5.9.2 and the issue is an operation restriction bypass in the Message and Bulletin components, enabling a remote authenticated attacker to alter data. The underlying cause is insufficient authorization checks w...

CVE-2023-26595

CVE-2023-26595 describes a denial-of-service in Cybozu Garoon, affecting versions 4.10.0 through 5.9.2. The vulnerability can be exploited by a remote authenticated user to cause a DoS condition in the product’s Message component. Public disclosures across multiple sources consistently cite Cyboz...

PT-2023-20757 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.10.0 through 5.9.2 Description: A denial-of-service DoS issue allows a remote authenticated attacker to cause a denial of service condition. Recommendations: For Cybozu Garoon versions 4.10.0 through 5.9.2, at the...

CVE-2023-26595

Denial-of-service DoS vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows a remote authenticated attacker to cause a denial of service condition...

CVE-2023-27384

Operation restriction bypass vulnerability in MultiReport of Cybozu Garoon 5.15.0 allows a remote authenticated attacker to alter the data of MultiReport...

Cybozu Garoon 安全漏洞

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A security vulnerability exists in Cybozu Garoon versions 4.10.0 through 5.9.2, which can be exploited by attacke...

JVN#41694426: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-3122 Denial-of-service DoS in Message CWE-400 - CVE-2023-26595 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L| Base Score: 5.0 CVSS v2| AV:N/AC:L/Au:S/C:N/I:N/A:P...

Cybozu Garoon 安全漏洞

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A security vulnerability exists in Cybozu Garoon version 5.15.0, which can be exploited by attackers to modify...

PT-2023-2935 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.6.0 through 5.9.2 Description: The issue is related to an operation restriction bypass vulnerability in the Message and Bulletin components of Cybozu Garoon. This vulnerability is associated with weaknesses in the...

PT-2023-2934 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon version 5.15.0 Description: The issue is related to an operation restriction bypass vulnerability in the MultiReport component of Cybozu Garoon, which is associated with inadequate access control. This vulnerability can be...

CVE-2022-44608

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a denial-of-service DoS condition...

CVE-2022-44608

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a denial-of-service DoS condition...

Race condition

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a denial-of-service DoS condition...

CVE-2022-44608

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a denial-of-service DoS condition...

CVE-2022-44608

The CVE-2022-44608 entry applies to Cybozu Remote Service, affecting versions 4.0.0–4.0.3. The root cause is uncontrolled resource consumption, enabling a remote authenticated attacker to exhaust storage space and cause a DoS condition. The impact is explicitly DoS due to storage exhaustion. Affe...

CVE-2022-44608

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a denial-of-service DoS condition...

PT-2022-27263 · Cybozu · Cybozu Remote Service

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 4.0.0 through 4.0.3 Description: The issue allows a remote authenticated attacker to consume huge storage space, potentially resulting in a denial-of-service DoS condition due to uncontrolled resource consumptio...

Cybozu Remote Service vulnerable to Uncontrolled Resource Consumption

Overview Cybozu Remote Service provided by Cybozu, Inc. is vulnerable to uncontrolled resource consumption CWE-400. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact A logged-in user may consume huge storage space, resulting to a...

JVN#87895771: Cybozu Remote Service vulnerable to Uncontrolled Resource Consumption

Cybozu Remote Service provided by Cybozu, Inc. is vulnerable to uncontrolled resource consumption CWE-400. Impact A logged-in user may consume huge storage space, resulting to a denial-of-service DoS condition. Solution Update the Software Update to the latest version according to the information...