Vulnerabilidades de Cybozu
CVEs publicadas que afetam produtos de Cybozu: 4 registro(s), com severidade, exploração e correções.
CVE-2026-57279
Média · 6.8
CWE-79 10/08/2026
Cross-site Scripting (XSS) em Cybozu Garoon
Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of a user logged in to the product.
CVE-2026-22888
Alta · 7.5
CWE-231 02/02/2026
Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead…
Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.
CVE-2026-22881
Média · 5.4
CWE-79 02/02/2026
Cross-site Scripting (XSS) em Cybozu Garoon
Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.
CVE-2026-20711
Média · 6.1
CWE-79 02/02/2026
Cross-site Scripting (XSS) em Cybozu Garoon
Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.