Approved changes feed: RSS · Atom

cpe:2.3:a:cybozu:garoon:2.1.0:*:*:*:*:*:*:*

part: a version: 2.1.0 update: *

VendorCybozu (6c3c6c19-80d3-5353-ad46-e08ec1369448)
ProductGaroon (d176de44-7896-57c4-9c0a-d58b65def00b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-1995 vulnerable 2026-06-08 05:05:27.077316 Details available
Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:58:16.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1994 vulnerable 2026-06-08 05:05:27.076409 Details available
Cross-site scripting (XSS) vulnerability in the Notices portlet in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:58:16.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1993 vulnerable 2026-06-08 05:05:27.075402 Details available
The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:58:16.112Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1988 vulnerable 2026-06-08 05:05:27.056543 Details available
The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.
Published: 2014-05-02T10:00:00.000Z
Updated: 2024-08-06T09:58:15.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0821 vulnerable 2026-06-08 05:05:14.558411 Details available
SQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6930 and CVE-2013-6931.
Published: 2014-02-27T01:00:00.000Z
Updated: 2024-08-06T09:27:20.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0820 vulnerable 2026-06-08 05:05:14.557055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0817 vulnerable 2026-06-08 05:05:14.547858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6930 vulnerable 2026-06-08 05:05:07.372159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0702 vulnerable 2026-06-08 05:03:49.474360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1334 vulnerable 2026-06-08 04:57:58.289949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1333 vulnerable 2026-06-08 04:57:58.286881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1332 vulnerable 2026-06-08 04:57:58.284727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6570 vulnerable 2026-06-08 04:50:55.438581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6569 vulnerable 2026-06-08 04:50:55.436006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.