CVE-2022-29892

CVE-2022-29892 is an improper input validation vulnerability in Cybozu Garoon's Space component affecting versions 4.0.0 through 5.5.1. An authenticated remote attacker can repeatedly trigger errors in certain functions, yielding a denial-of-service condition. The issue is documented across multi...

CVE-2022-29513

CVE-2022-29513 is a cross-site scripting vulnerability in Cybozu Garoon’s Scheduler. The issue arises from insufficient sanitization of user input in the Scheduler, allowing a remote authenticated attacker with administrative privileges to execute arbitrary JavaScript in a logged-in user’s browse...

CVE-2022-29513

Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary script...

CVE-2022-29484

Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a remote authenticated attacker to delete the data of Space...

CVE-2022-29484

The CVE-2022-29484 issue affects Cybozu Garoon 4.0.0 to 5.9.0. root cause: an authorization/operation restriction bypass in Space that enables a remote authenticated attacker to delete Space data. Impact: potential deletion of Space data; authenticated access required; no user interaction needed....

CVE-2022-29471

Summary: CVE-2022-29471 is a browse restriction bypass vulnerability in Cybozu Garoon Bulletin that can allow a logged-in, remote attacker to obtain bulletin data. The issue is a violation of access controls (CWE-284) in Bulletin handling. Affected products/versions (per connected docs): Cybozu G...

CVE-2022-29471

Browse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote authenticated attacker to obtain the data of Bulletin...

CVE-2022-29467

CVE-2022-29467 affects Cybozu Garoon 4.2.0–5.5.1. An authenticated remote attacker can disclose address data due to an information-disclosure vulnerability (CWE-200). Affected components are the Address information handling areas; impact is exposure of some address data. The issue is addressed by...

CVE-2022-29467

Address information disclosure vulnerability in Cybozu Garoon 4.2.0 to 5.5.1 allows a remote authenticated attacker to obtain some data of Address...

CVE-2022-28718

CVE-2022-28718 affects Cybozu Garoon, specifically the Bulletin module. The issue is an Operation restriction bypass that allows a remote authenticated attacker to alter Bulletin data. Affected versions are Cybozu Garoon 4.0.0 through 5.5.1 (and related ranges listed in the JVN/NVD records). Impa...

CVE-2022-28718

Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a remote authenticated attacker to alter the data of Bulletin...

CVE-2022-28713

Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the product...

CVE-2022-28713

CVE-2022-28713 describes an improper authentication vulnerability in the Scheduler component of Cybozu Garoon, allowing a remote attacker to obtain some Facility Information data without logging in. Affected software: Cybozu Garoon versions 4.0.0 through 5.5.1 (per multiple connected sources) wit...

CVE-2022-28692

Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Scheduler...

CVE-2022-28692

CVE-2022-28692 concerns Cybozu Garoon’s Scheduler component, with an improper input validation flaw in versions 4.0.0–5.5.1. The issue can allow a remote authenticated attacker to alter Scheduler data. Affected product: Cybozu Garoon (Scheduler). Root cause: input validation weakness in Scheduler...

CVE-2022-27807

CVE-2022-27807 is an improper input validation vulnerability in Cybozu Garoon, specifically in the Link component, that allows a remote authenticated attacker to disable the ability to add Categories. Affected versions span Cybozu Garoon 4.0.0 through 5.5.1 (per multiple sources); other entries e...

CVE-2022-27803

CVE-2022-27803 is an improper input validation vulnerability in Cybozu Garoon Space, affecting Garoon 4.0.0 through 5.5.1. An authenticated remote attacker could alter Space data due to input validation weaknesses. Public sources (NVD, JVN, Red Hat, CNVD/CNNVD) corroborate the vulnerability and a...

CVE-2022-27803

Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space...

CVE-2022-27661

Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Workflow...

CVE-2022-27661

CVE-2022-27661 is an operation restriction bypass vulnerability in Cybozu Garoon workflows. A remote authenticated attacker can alter Workflow data in Cybozu Garoon versions 4.0.0 through 5.5.1. Multiple connected sources (NVD, Red Hat, JVN, JVN DB, CNVD, CNNVD, PRION) confirm the issue and ident...