Garoon vulnerabilities

2 known vulnerabilities in Garoon from Cybozu. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Cybozu Garoon: Improper Handling of Extra Values

  CVE-2026-22888Feb 2, 2026Cybozu

  Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.

• 9.0 Critical severity

  Cybozu Garoon: Improper Neutralization of Input During Web Page Generation

  CVE-2024-31401Jun 11, 2024Cybozu

  Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script on the web browser of the user who is logging in to the product.