Garoon Security Vulnerabilities and Issues — Garoon CVE List

Lucene search

CybozuGaroon

3 matches found

CVE•added 2024/06/11 5:15 a.m.•48 views

CVE-2024-31401

Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script on the web browser of the user who is logging in to the product.

9CVSS6.4AI score0.00676EPSS

CVE•added 2019/05/17 4:29 p.m.•39 views

CVE-2019-5945

Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authentication of Cybozu Garoon.

9.8CVSS7.1AI score0.00844EPSS

CVE•added 2017/04/20 5:59 p.m.•31 views

CVE-2016-1219

Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use.

9.8CVSS9.4AI score0.03868EPSS