# cve.now: Cybozu, Inc.

The newest entries naming Cybozu, Inc. as an affected vendor (up to 200), of 201 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-57279](https://cve.now/CVE-2026-57279.md): Cybozu Garoon contains a cross-site scripting vulnerability. (CVSS 6.8)
- [CVE-2026-22888](https://cve.now/CVE-2026-22888.md): Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, pote (CVSS 4.9)
- [CVE-2026-22881](https://cve.now/CVE-2026-22881.md): Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitra (CVSS 5.7)
- [CVE-2026-20711](https://cve.now/CVE-2026-20711.md): Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary (CVSS 6.5)
- [CVE-2024-39817](https://cve.now/CVE-2024-39817.md): Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to th (CVSS 6.5)
- [CVE-2024-39457](https://cve.now/CVE-2024-39457.md): Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. (CVSS 5.4)
- [CVE-2024-31397](https://cve.now/CVE-2024-31397.md): Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2. (CVSS 4.9)
- [CVE-2024-31399](https://cve.now/CVE-2024-31399.md): Excessive platform resource consumption within a loop issue exists in Cybozu Garoon 5.0.0 to 5.15.2. (CVSS 5.3)
- [CVE-2024-31402](https://cve.now/CVE-2024-31402.md): Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker to delete the data of Shared T (CVSS 4.3)
- [CVE-2024-31398](https://cve.now/CVE-2024-31398.md): Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.2. (CVSS 4.3)
- [CVE-2024-31404](https://cve.now/CVE-2024-31404.md): Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.5.0 to 6.0.0, which may allow a user who can log in to the (CVSS 4.3)
- [CVE-2024-31403](https://cve.now/CVE-2024-31403.md): Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 6.0.0 allows a remote authenticated attacker to alter and/or obtain the data (CVSS 5.4)
- [CVE-2024-31401](https://cve.now/CVE-2024-31401.md): Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker with an administrative privilege (CVSS 9.0)
- [CVE-2024-31400](https://cve.now/CVE-2024-31400.md): Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.0. (CVSS 6.5)
- [CVE-2024-23304](https://cve.now/CVE-2024-23304.md): Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by performin (CVSS 7.5)
- [CVE-2023-46278](https://cve.now/CVE-2023-46278.md): Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated attacker to consume hu (no CVSS)
- [CVE-2022-26838](https://cve.now/CVE-2022-26838.md): Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause (no CVSS)
- [CVE-2023-27384](https://cve.now/CVE-2023-27384.md): Operation restriction bypass vulnerability in MultiReport of Cybozu Garoon 5.15.0 allows a remote authenticated attacker to alter the data o (no CVSS)
- [CVE-2023-27304](https://cve.now/CVE-2023-27304.md): Operation restriction bypass vulnerability in Message and Bulletin of Cybozu Garoon 4.6.0 to 5.9.2 allows a remote authenticated attacker to (no CVSS)
- [CVE-2023-26595](https://cve.now/CVE-2023-26595.md): Denial-of-service (DoS) vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows a remote authenticated attacker to cause a denial o (CVSS 5.5)
- [CVE-2022-44608](https://cve.now/CVE-2022-44608.md): Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume hu (CVSS 7.5)
- [CVE-2022-33311](https://cve.now/CVE-2022-33311.md): Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain t (no CVSS)
- [CVE-2022-33151](https://cve.now/CVE-2022-33151.md): Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows remote attackers to inject an arbitra (no CVSS)
- [CVE-2022-32583](https://cve.now/CVE-2022-32583.md): Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter th (no CVSS)
- [CVE-2022-32544](https://cve.now/CVE-2022-32544.md): Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the (no CVSS)
- [CVE-2022-32453](https://cve.now/CVE-2022-32453.md): HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the pro (no CVSS)
- [CVE-2022-32283](https://cve.now/CVE-2022-32283.md): Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the da (no CVSS)
- [CVE-2022-30693](https://cve.now/CVE-2022-30693.md): Information disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to obtain the da (no CVSS)
- [CVE-2022-30604](https://cve.now/CVE-2022-30604.md): Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitr (no CVSS)
- [CVE-2022-29891](https://cve.now/CVE-2022-29891.md): Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the (no CVSS)
- [CVE-2022-29487](https://cve.now/CVE-2022-29487.md): Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified (no CVSS)
- [CVE-2022-28715](https://cve.now/CVE-2022-28715.md): Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitr (no CVSS)
- [CVE-2022-25986](https://cve.now/CVE-2022-25986.md): Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the (no CVSS)
- [CVE-2022-31472](https://cve.now/CVE-2022-31472.md): Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to obtain the data (no CVSS)
- [CVE-2022-30943](https://cve.now/CVE-2022-30943.md): Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the d (no CVSS)
- [CVE-2022-30602](https://cve.now/CVE-2022-30602.md): Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to alter the fi (no CVSS)
- [CVE-2022-29512](https://cve.now/CVE-2022-29512.md): Exposure of sensitive information to an unauthorized actor issue in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote au (no CVSS)
- [CVE-2022-29892](https://cve.now/CVE-2022-29892.md): Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to repeatedly displa (no CVSS)
- [CVE-2022-29513](https://cve.now/CVE-2022-29513.md): Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote authenticated attacker with an administrati (no CVSS)
- [CVE-2022-29484](https://cve.now/CVE-2022-29484.md): Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a remote authenticated attacker to delete the dat (no CVSS)
- [CVE-2022-29471](https://cve.now/CVE-2022-29471.md): Browse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote authenticated attacker to obtain the data of Bulletin. (no CVSS)
- [CVE-2022-29467](https://cve.now/CVE-2022-29467.md): Address information disclosure vulnerability in Cybozu Garoon 4.2.0 to 5.5.1 allows a remote authenticated attacker to obtain some data of A (no CVSS)
- [CVE-2022-28718](https://cve.now/CVE-2022-28718.md): Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a remote authenticated attacker to alter the da (no CVSS)
- [CVE-2022-28713](https://cve.now/CVE-2022-28713.md): Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility (no CVSS)
- [CVE-2022-28692](https://cve.now/CVE-2022-28692.md): Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the dat (no CVSS)
- [CVE-2022-27807](https://cve.now/CVE-2022-27807.md): Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to disable to add Cat (no CVSS)
- [CVE-2022-27803](https://cve.now/CVE-2022-27803.md): Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of (no CVSS)
- [CVE-2022-27661](https://cve.now/CVE-2022-27661.md): Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the d (no CVSS)
- [CVE-2022-27627](https://cve.now/CVE-2022-27627.md): Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arb (no CVSS)
- [CVE-2022-26368](https://cve.now/CVE-2022-26368.md): Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenti (no CVSS)
- [CVE-2022-26054](https://cve.now/CVE-2022-26054.md): Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data (no CVSS)
- [CVE-2022-26051](https://cve.now/CVE-2022-26051.md): Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the dat (no CVSS)
- [CVE-2021-20807](https://cve.now/CVE-2021-20807.md): Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an ar (no CVSS)
- [CVE-2021-20806](https://cve.now/CVE-2021-20806.md): Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and con (no CVSS)
- [CVE-2021-20805](https://cve.now/CVE-2021-20805.md): Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker t (no CVSS)
- [CVE-2021-20804](https://cve.now/CVE-2021-20804.md): Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of service (DoS) condition via unspecified vec (no CVSS)
- [CVE-2021-20803](https://cve.now/CVE-2021-20803.md): Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alte (no CVSS)
- [CVE-2021-20802](https://cve.now/CVE-2021-20802.md): HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the (no CVSS)
- [CVE-2021-20801](https://cve.now/CVE-2021-20801.md): Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity (XXE) attacks and obtain the info (no CVSS)
- [CVE-2021-20800](https://cve.now/CVE-2021-20800.md): Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject (no CVSS)
- [CVE-2021-20799](https://cve.now/CVE-2021-20799.md): Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker t (no CVSS)
- [CVE-2021-20798](https://cve.now/CVE-2021-20798.md): Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker t (no CVSS)
- [CVE-2021-20797](https://cve.now/CVE-2021-20797.md): Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to (no CVSS)
- [CVE-2021-20796](https://cve.now/CVE-2021-20796.md): Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload a (no CVSS)
- [CVE-2021-20795](https://cve.now/CVE-2021-20795.md): Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to (no CVSS)
- [CVE-2021-20775](https://cve.now/CVE-2021-20775.md): Improper input validation vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the da (no CVSS)
- [CVE-2021-20774](https://cve.now/CVE-2021-20774.md): Cross-site scripting vulnerability in some functions of E-mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote authenticated attacker to inj (no CVSS)
- [CVE-2021-20773](https://cve.now/CVE-2021-20773.md): There is a vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.0, which may allow a remote authenticated attacker to delete the route in (no CVSS)
- [CVE-2021-20772](https://cve.now/CVE-2021-20772.md): Information disclosure vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the title (no CVSS)
- [CVE-2021-20771](https://cve.now/CVE-2021-20771.md): Cross-site scripting vulnerability in some functions of E-Mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote attacker to inject an arbitra (no CVSS)
- [CVE-2021-20770](https://cve.now/CVE-2021-20770.md): Cross-site scripting vulnerability in Message of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary (no CVSS)
- [CVE-2021-20769](https://cve.now/CVE-2021-20769.md): Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary (no CVSS)
- [CVE-2021-20768](https://cve.now/CVE-2021-20768.md): Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated att (no CVSS)
- [CVE-2021-20767](https://cve.now/CVE-2021-20767.md): Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an a (no CVSS)
- [CVE-2021-20766](https://cve.now/CVE-2021-20766.md): Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via uns (no CVSS)
- [CVE-2021-20765](https://cve.now/CVE-2021-20765.md): Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via un (no CVSS)
- [CVE-2021-20764](https://cve.now/CVE-2021-20764.md): Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Att (no CVSS)
- [CVE-2021-20763](https://cve.now/CVE-2021-20763.md): Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the (no CVSS)
- [CVE-2021-20762](https://cve.now/CVE-2021-20762.md): Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated to alter the data of E-mail (no CVSS)
- [CVE-2021-20761](https://cve.now/CVE-2021-20761.md): Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker with an administrative privilege (no CVSS)
- [CVE-2021-20760](https://cve.now/CVE-2021-20760.md): Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the (no CVSS)
- [CVE-2021-20759](https://cve.now/CVE-2021-20759.md): Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter th (no CVSS)
- [CVE-2021-20758](https://cve.now/CVE-2021-20758.md): Cross-site request forgery (CSRF) vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to hijack (no CVSS)
- [CVE-2021-20757](https://cve.now/CVE-2021-20757.md): Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the (no CVSS)
- [CVE-2021-20756](https://cve.now/CVE-2021-20756.md): Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the da (no CVSS)
- [CVE-2021-20755](https://cve.now/CVE-2021-20755.md): Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the dat (no CVSS)
- [CVE-2021-20754](https://cve.now/CVE-2021-20754.md): Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data (no CVSS)
- [CVE-2021-20753](https://cve.now/CVE-2021-20753.md): Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrar (no CVSS)
- [CVE-2021-20634](https://cve.now/CVE-2021-20634.md): Improper access control vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restri (no CVSS)
- [CVE-2021-20633](https://cve.now/CVE-2021-20633.md): Improper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restricti (no CVSS)
- [CVE-2021-20632](https://cve.now/CVE-2021-20632.md): Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access re (no CVSS)
- [CVE-2021-20631](https://cve.now/CVE-2021-20631.md): Improper input validation vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attacker to alter the data of C (no CVSS)
- [CVE-2021-20630](https://cve.now/CVE-2021-20630.md): Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access re (no CVSS)
- [CVE-2021-20629](https://cve.now/CVE-2021-20629.md): Cross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via uns (no CVSS)
- [CVE-2021-20628](https://cve.now/CVE-2021-20628.md): Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script v (no CVSS)
- [CVE-2021-20627](https://cve.now/CVE-2021-20627.md): Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script v (no CVSS)
- [CVE-2021-20626](https://cve.now/CVE-2021-20626.md): Improper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restrict (no CVSS)
- [CVE-2021-20625](https://cve.now/CVE-2021-20625.md): Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access (no CVSS)
- [CVE-2021-20624](https://cve.now/CVE-2021-20624.md): Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restr (no CVSS)
- [CVE-2020-5643](https://cve.now/CVE-2020-5643.md): Improper input validation vulnerability in Cybozu Garoon 5.0.0 to 5.0.2 allows a remote authenticated attacker to delete some data of the bu (no CVSS)
- [CVE-2020-5588](https://cve.now/CVE-2020-5588.md): Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to obtain unintended information via (no CVSS)
- [CVE-2020-5587](https://cve.now/CVE-2020-5587.md): Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vectors. (no CVSS)
- [CVE-2020-5586](https://cve.now/CVE-2020-5586.md): Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script (no CVSS)
- [CVE-2020-5585](https://cve.now/CVE-2020-5585.md): Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script v (no CVSS)
- [CVE-2020-5584](https://cve.now/CVE-2020-5584.md): Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors. (no CVSS)
- [CVE-2020-5583](https://cve.now/CVE-2020-5583.md): Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data v (no CVSS)
- [CVE-2020-5582](https://cve.now/CVE-2020-5582.md): Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to R (no CVSS)
- [CVE-2020-5581](https://cve.now/CVE-2020-5581.md): Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended information via unsp (no CVSS)
- [CVE-2020-5580](https://cve.now/CVE-2020-5580.md): Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Single sign-on settings (no CVSS)
- [CVE-2020-5573](https://cve.now/CVE-2020-5573.md): Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unsp (no CVSS)
- [CVE-2020-5572](https://cve.now/CVE-2020-5572.md): Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecif (no CVSS)
- [CVE-2020-5537](https://cve.now/CVE-2020-5537.md): Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors. (no CVSS)
- [CVE-2020-5568](https://cve.now/CVE-2020-5568.md): Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web script or HTML via the ap (no CVSS)
- [CVE-2020-5567](https://cve.now/CVE-2020-5567.md): Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in Application Menu. (no CVSS)
- [CVE-2020-5566](https://cve.now/CVE-2020-5566.md): Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data (no CVSS)
- [CVE-2020-5565](https://cve.now/CVE-2020-5565.md): Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's d (no CVSS)
- [CVE-2020-5564](https://cve.now/CVE-2020-5564.md): Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the a (no CVSS)
- [CVE-2020-5563](https://cve.now/CVE-2020-5563.md): Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the affected product via th (no CVSS)
- [CVE-2020-5562](https://cve.now/CVE-2020-5562.md): Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege t (no CVSS)
- [CVE-2019-6023](https://cve.now/CVE-2019-6023.md): Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to bypass access restriction which may result in obtaining data without (no CVSS)
- [CVE-2019-6022](https://cve.now/CVE-2019-6022.md): Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to alter arbitrary files via the ' (no CVSS)
- [CVE-2019-5978](https://cve.now/CVE-2019-5978.md): Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct ph (no CVSS)
- [CVE-2019-5947](https://cve.now/CVE-2019-5947.md): Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or (no CVSS)
- [CVE-2019-5946](https://cve.now/CVE-2019-5946.md): Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct ph (no CVSS)
- [CVE-2019-5945](https://cve.now/CVE-2019-5945.md): Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authentication of Cybozu Garoon. (no CVSS)
- [CVE-2019-5944](https://cve.now/CVE-2019-5944.md): Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the contents of application 'Address' (no CVSS)
- [CVE-2019-5943](https://cve.now/CVE-2019-5943.md): Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to view the information without view privil (no CVSS)
- [CVE-2019-5942](https://cve.now/CVE-2019-5942.md): Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges v (no CVSS)
- [CVE-2019-5941](https://cve.now/CVE-2019-5941.md): Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges (no CVSS)
- [CVE-2019-5940](https://cve.now/CVE-2019-5940.md): Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the a (no CVSS)
- [CVE-2019-5939](https://cve.now/CVE-2019-5939.md): Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the a (no CVSS)
- [CVE-2019-5938](https://cve.now/CVE-2019-5938.md): Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the a (no CVSS)
- [CVE-2019-5937](https://cve.now/CVE-2019-5937.md): Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or (no CVSS)
- [CVE-2019-5936](https://cve.now/CVE-2019-5936.md): Directory traversal vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to obtain files without access priv (no CVSS)
- [CVE-2019-5935](https://cve.now/CVE-2019-5935.md): Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access p (no CVSS)
- [CVE-2019-5934](https://cve.now/CVE-2019-5934.md): SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands (no CVSS)
- [CVE-2019-5933](https://cve.now/CVE-2019-5933.md): Cybozu Garoon 4.0.0 to 4.10.0 allows remote authenticated attackers to bypass access restriction to view the Bulletin Board without view pri (no CVSS)
- [CVE-2019-5932](https://cve.now/CVE-2019-5932.md): Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows remote authenticated attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2019-5931](https://cve.now/CVE-2019-5931.md): Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified (no CVSS)
- [CVE-2019-5930](https://cve.now/CVE-2019-5930.md): Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Manageme (no CVSS)
- [CVE-2019-5929](https://cve.now/CVE-2019-5929.md): Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the ap (no CVSS)
- [CVE-2019-5928](https://cve.now/CVE-2019-5928.md): Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Custom (no CVSS)
- [CVE-2018-16178](https://cve.now/CVE-2018-16178.md): Cybozu Garoon 3.0.0 to 4.10.0 allows remote attackers to bypass access restriction to view information available only for a sign-on user via (no CVSS)
- [CVE-2018-16172](https://cve.now/CVE-2018-16172.md): Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 t (no CVSS)
- [CVE-2018-16171](https://cve.now/CVE-2018-16171.md): Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server vi (no CVSS)
- [CVE-2018-16170](https://cve.now/CVE-2018-16170.md): Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrar (no CVSS)
- [CVE-2018-16169](https://cve.now/CVE-2018-16169.md): Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecifie (no CVSS)
- [CVE-2018-0705](https://cve.now/CVE-2018-0705.md): Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests. (no CVSS)
- [CVE-2018-0704](https://cve.now/CVE-2018-0704.md): Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen. (no CVSS)
- [CVE-2018-0703](https://cve.now/CVE-2018-0703.md): Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests. (no CVSS)
- [CVE-2018-0702](https://cve.now/CVE-2018-0702.md): Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vector (no CVSS)
- [CVE-2018-0673](https://cve.now/CVE-2018-0673.md): Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vec (no CVSS)
- [CVE-2018-0607](https://cve.now/CVE-2018-0607.md): SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to ex (no CVSS)
- [CVE-2018-0567](https://cve.now/CVE-2018-0567.md): Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecifi (no CVSS)
- [CVE-2018-0566](https://cve.now/CVE-2018-0566.md): Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass authentication to obtain the schedules without access privilege via (no CVSS)
- [CVE-2018-0565](https://cve.now/CVE-2018-0565.md): Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unsp (no CVSS)
- [CVE-2018-0559](https://cve.now/CVE-2018-0559.md): Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address (no CVSS)
- [CVE-2018-0558](https://cve.now/CVE-2018-0558.md): Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2018-0557](https://cve.now/CVE-2018-0557.md): Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML ' (no CVSS)
- [CVE-2018-0529](https://cve.now/CVE-2018-0529.md): Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to cause a denial of service via unspecified vectors. (no CVSS)
- [CVE-2018-0528](https://cve.now/CVE-2018-0528.md): Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules that are not permitted to acces (no CVSS)
- [CVE-2018-0527](https://cve.now/CVE-2018-0527.md): Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unsp (no CVSS)
- [CVE-2018-0551](https://cve.now/CVE-2018-0551.md): Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2018-0550](https://cve.now/CVE-2018-0550.md): Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via un (no CVSS)
- [CVE-2018-0549](https://cve.now/CVE-2018-0549.md): Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2018-0548](https://cve.now/CVE-2018-0548.md): Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unsp (no CVSS)
- [CVE-2018-0533](https://cve.now/CVE-2018-0533.md): Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authenticat (no CVSS)
- [CVE-2018-0532](https://cve.now/CVE-2018-0532.md): Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard databa (no CVSS)
- [CVE-2018-0531](https://cve.now/CVE-2018-0531.md): Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a fo (no CVSS)
- [CVE-2018-0530](https://cve.now/CVE-2018-0530.md): SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2017-10857](https://cve.now/CVE-2017-10857.md): Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" functi (no CVSS)
- [CVE-2017-2258](https://cve.now/CVE-2017-2258.md): Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHa (no CVSS)
- [CVE-2017-2257](https://cve.now/CVE-2017-2257.md): Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail functi (no CVSS)
- [CVE-2017-2256](https://cve.now/CVE-2017-2256.md): Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" (no CVSS)
- [CVE-2017-2255](https://cve.now/CVE-2017-2255.md): Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" (no CVSS)
- [CVE-2017-2254](https://cve.now/CVE-2017-2254.md): Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted i (no CVSS)
- [CVE-2017-2172](https://cve.now/CVE-2017-2172.md): Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2017-2146](https://cve.now/CVE-2017-2146.md): Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via applic (no CVSS)
- [CVE-2017-2145](https://cve.now/CVE-2017-2145.md): Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vecto (no CVSS)
- [CVE-2017-2144](https://cve.now/CVE-2017-2144.md): Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page. (no CVSS)
- [CVE-2016-7833](https://cve.now/CVE-2016-7833.md): Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary forma (no CVSS)
- [CVE-2016-7832](https://cve.now/CVE-2016-7832.md): Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary forma (no CVSS)
- [CVE-2016-7816](https://cve.now/CVE-2016-7816.md): The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle (no CVSS)
- [CVE-2016-7803](https://cve.now/CVE-2016-7803.md): SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2016-7801](https://cve.now/CVE-2016-7801.md): Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors. (no CVSS)
- [CVE-2016-4910](https://cve.now/CVE-2016-4910.md): Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operational administrators' (no CVSS)
- [CVE-2016-4909](https://cve.now/CVE-2016-4909.md): Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the authentication of a lo (no CVSS)
- [CVE-2016-4908](https://cve.now/CVE-2016-4908.md): Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RS (no CVSS)
- [CVE-2016-4907](https://cve.now/CVE-2016-4907.md): Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors. (no CVSS)
- [CVE-2016-4906](https://cve.now/CVE-2016-4906.md): Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messa (no CVSS)
- [CVE-2017-2116](https://cve.now/CVE-2017-2116.md): Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspec (no CVSS)
- [CVE-2017-2115](https://cve.now/CVE-2017-2115.md): Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain "customapp" information via unsp (no CVSS)
- [CVE-2017-2114](https://cve.now/CVE-2017-2114.md): Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or (no CVSS)
- [CVE-2017-2109](https://cve.now/CVE-2017-2109.md): Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application. (no CVSS)
- [CVE-2017-2095](https://cve.now/CVE-2017-2095.md): Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteratio (no CVSS)
- [CVE-2017-2094](https://cve.now/CVE-2017-2094.md): Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function t (no CVSS)
- [CVE-2017-2093](https://cve.now/CVE-2017-2093.md): Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors. (no CVSS)
- [CVE-2017-2092](https://cve.now/CVE-2017-2092.md): Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2017-2091](https://cve.now/CVE-2017-2091.md): Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the stat (no CVSS)
- [CVE-2017-2090](https://cve.now/CVE-2017-2090.md): Directory traversal vulnerability in CubeCart versions prior to 6.1.4 allows remote authenticated attackers to read arbitrary files via unsp (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/cybozu
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.