Filtered by vendor Cybozu Subscriptions
Filtered by product Cybozu Garoon Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-20711 1 Cybozu 2 Cybozu Garoon, Garoon 2026-02-19 6.1 Medium
Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.
CVE-2026-22881 1 Cybozu 2 Cybozu Garoon, Garoon 2026-02-19 5.4 Medium
Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.
CVE-2008-6744 1 Cybozu 3 Cybozu Dezie, Cybozu Garoon, Cybozu Office 2025-04-09 N/A
Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.