← Back

Cybozu

cybozu

330 CVEs • 21 products

Products (21)

Click to collapse
Toggle
Garoon
garoon
Office
office
Mailwise
mailwise
Cybozu Office
cybozu_office
Dezie
dezie
Kunai
kunai
Cybozu Live
cybozu_live
Kintone
kintone
Collaborex
collaborex
Cybozu Dezie
cybozu_dezie
Share360
share360
Share 360
share_360
Cybozu Ag
cybozu_ag
Cybozu Pocket
cybozu_pocket
Garoon 1
garoon_1
Cybozu Garoon
cybozu_garoon
Desktop
desktop

CVEs (330)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Cybozu
1Office
Jun 17, 2026
Aug 18, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified vectors.
1Cybozu
1Office
Jun 17, 2026
Aug 18, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows remote attackers to inject an arbitrary script via unspecified vectors.
1Cybozu
1Office
Jun 17, 2026
Aug 18, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Scheduler via unspecified vectors.
1Cybozu
1Office
Jun 17, 2026
Aug 18, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Project via unspecified vectors.
1Cybozu
1Office
Jun 17, 2026
Aug 18, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors.
1Cybozu
1Office
Jun 17, 2026
Aug 18, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Cabinet via unspecified vectors.
1Cybozu
1Office
Jun 17, 2026
Aug 18, 2022
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Information disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to obtain the data of the product via unspecified vectors.
1Cybozu
1Office
Jun 17, 2026
Aug 18, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
1Cybozu
1Office
Jun 17, 2026
Aug 18, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Custom App via unspecified vectors.
1Cybozu
1Office
Jun 17, 2026
Aug 18, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
1Cybozu
1Office
Jun 17, 2026
Aug 18, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors.
1Cybozu
1Office
Jun 17, 2026
Aug 18, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler.
1Cybozu
1Garoon
Jun 17, 2026
Jul 11, 2022
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to obtain the data of Cabinet.
1Cybozu
1Garoon
Jun 17, 2026
Jul 11, 2022
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data of Bulletin.
1Cybozu
1Garoon
Jun 17, 2026
Jul 11, 2022
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to alter the file information and/or delete the files.
1Cybozu
1Garoon
Jun 17, 2026
Jul 11, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Exposure of sensitive information to an unauthorized actor issue in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data without the viewing privilege.
1Cybozu
1Garoon
Jun 17, 2026
Jul 4, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to repeatedly display errors in certain functions and cause a denial-of-service (DoS).
1Cybozu
1Garoon
Jun 17, 2026
Jul 4, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary script.
1Cybozu
1Garoon
Jun 17, 2026
Jul 4, 2022
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a remote authenticated attacker to delete the data of Space.
1Cybozu
1Garoon
Jun 17, 2026
Jul 4, 2022
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Browse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote authenticated attacker to obtain the data of Bulletin.