Cybozu Garoon vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Cybozu Garoon: 4 record(s), with affected versions and fixes.cpe:2.3:a:cybozu:garoon
CVE-2026-57279
Medium · 6.8
CWE-79 Aug 10, 2026
Cross-site Scripting (XSS) in Cybozu Garoon
Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of a user logged in to the product.
CVE-2026-22888
High · 7.5
CWE-231 Feb 2, 2026
Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead…
Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.
CVE-2026-22881
Medium · 5.4
CWE-79 Feb 2, 2026
Cross-site Scripting (XSS) in Cybozu Garoon
Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.
CVE-2026-20711
Medium · 6.1
CWE-79 Feb 2, 2026
Cross-site Scripting (XSS) in Cybozu Garoon
Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.