CVE-2022-28692

Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Scheduler...

CVE-2022-27807

CVE-2022-27807 is an improper input validation vulnerability in Cybozu Garoon, specifically in the Link component, that allows a remote authenticated attacker to disable the ability to add Categories. Affected versions span Cybozu Garoon 4.0.0 through 5.5.1 (per multiple sources); other entries e...

CVE-2022-27803

CVE-2022-27803 is an improper input validation vulnerability in Cybozu Garoon Space, affecting Garoon 4.0.0 through 5.5.1. An authenticated remote attacker could alter Space data due to input validation weaknesses. Public sources (NVD, JVN, Red Hat, CNVD/CNNVD) corroborate the vulnerability and a...

CVE-2022-27803

Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space...

CVE-2022-27661

CVE-2022-27661 is an operation restriction bypass vulnerability in Cybozu Garoon workflows. A remote authenticated attacker can alter Workflow data in Cybozu Garoon versions 4.0.0 through 5.5.1. Multiple connected sources (NVD, Red Hat, JVN, JVN DB, CNVD, CNNVD, PRION) confirm the issue and ident...

CVE-2022-27661

Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Workflow...

CVE-2022-27627

Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbitrary script on the logged-in user's web browser...

CVE-2022-27627

CVE-2022-27627 is a cross-site scripting vulnerability in Cybozu Garoon’s Organization’s Information that can allow a logged-in user to have arbitrary script executed in their browser. Affected versions include Cybozu Garoon 4.10.2 to 5.5.1 (and related ranges listed across sources), with the roo...

CVE-2022-26368

CVE-2022-26368 is a vulnerability in Cybozu Garoon's Cabinet component (versions 4.0.0 to 5.5.1) described as a browse restriction bypass and operation restriction bypass (CWE-285). The issue allows a remote authenticated attacker to alter and/or obtain data stored in Cabinet. It is associated wi...

CVE-2022-26368

Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter and/or obtain the data of Cabinet...

CVE-2022-26054

CVE-2022-26054 is an operation restriction bypass vulnerability in Cybozu Garoon’s Link component, affecting versions 4.0.0 through 5.5.1. The flaw—rooted in improper privilege management in Link—permits a remote authenticated attacker to alter Link data. Affects Cybozu Garoon (portal/ OA suite) ...

CVE-2022-26054

Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Link...

CVE-2022-26051

Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Portal...

CVE-2022-26051

CVE-2022-26051 affects Cybozu Garoon 4.0.0 through 5.5.1. The issue is an operation restriction bypass in the Portal caused by improper privilege management, enabling a remote authenticated attacker to alter Portal data. Multiple sources corroborate the vulnerability in the Portal component and/o...

Multiple vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-2909 Operation restriction bypass in multiple applications CWE-285 - CVE-2022-30602 CyVDB-3042 Information disclosure in multiple applications CWE-200 - CVE-2022-29512 CyVDB-3111 Improper input...

Cybozu Garoon 授权问题漏洞

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An authorization issue vulnerability exists in Cybozu Garoon. The vulnerability stems from improper privilege...

Cybozu Garoon 信息泄露漏洞

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides portal, E-mail, bookmark, scheduler, bulletin board, document management, etc. An information disclosure vulnerability exists in Cybozu Garoon, which stems from exporting too much data in multiple applications...

PT-2022-19633 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.2.0 through 5.5.1 Description: The issue allows a remote authenticated attacker to obtain some address data. Recommendations: For Cybozu Garoon versions 4.2.0 through 5.5.1, update to a version that contains a fix for...

PT-2022-19194 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.5.1 Description: The issue allows a remote authenticated attacker to bypass operation restrictions and alter the data of the Bulletin. Recommendations: For Cybozu Garoon versions 4.0.0 through 5.5.1,...

PT-2022-17644 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.5.1 Description: The issue allows a remote authenticated attacker to alter the data of Link. This is due to an operation restriction bypass vulnerability. Recommendations: For versions 4.0.0 through 5.5....