Approved changes feed: RSS · Atom

cpe:2.3:a:cybozu:garoon:2.1.3:*:*:*:*:*:*:*

part: a version: 2.1.3 update: *

VendorCybozu (6c3c6c19-80d3-5353-ad46-e08ec1369448)
ProductGaroon (d176de44-7896-57c4-9c0a-d58b65def00b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-1995 vulnerable 2026-06-08 05:05:27.077369 Details available
Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:58:16.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1994 vulnerable 2026-06-08 05:05:27.076465 Details available
Cross-site scripting (XSS) vulnerability in the Notices portlet in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:58:16.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1993 vulnerable 2026-06-08 05:05:27.075456 Details available
The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:58:16.112Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1988 vulnerable 2026-06-08 05:05:27.058091 Details available
The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.
Published: 2014-05-02T10:00:00.000Z
Updated: 2024-08-06T09:58:15.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0821 vulnerable 2026-06-08 05:05:14.558524 Details available
SQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6930 and CVE-2013-6931.
Published: 2014-02-27T01:00:00.000Z
Updated: 2024-08-06T09:27:20.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0820 vulnerable 2026-06-08 05:05:14.557103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0817 vulnerable 2026-06-08 05:05:14.547908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6930 vulnerable 2026-06-08 05:05:07.373941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0702 vulnerable 2026-06-08 05:03:49.476045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1334 vulnerable 2026-06-08 04:57:58.290125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1333 vulnerable 2026-06-08 04:57:58.287039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1332 vulnerable 2026-06-08 04:57:58.286242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6570 vulnerable 2026-06-08 04:50:55.438633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6569 vulnerable 2026-06-08 04:50:55.437652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.