Cybozu vulnerabilities
We track 4 vulnerabilities in Cybozu products across 5 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on February 2, 2026.
Latest Cybozu vulnerabilities
- 7.5 High severity
Cybozu Garoon: Improper Handling of Extra Values
Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.
- 9.0 Critical severity
Cybozu Garoon: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script on the web browser of the user who is logging in to the product.
- 7.5 High severity
Cybozu KUNAI for Android: Untrusted Search Path
Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by performing certain operations.
- 7.5 High severity
Cybozu Remote Service: Uncontrolled Resource Consumption
Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a denial-of-service (DoS) condition.