Approved changes feed: RSS · Atom

cpe:2.3:a:cybozu:garoon:2.1.2:*:*:*:*:*:*:*

part: a version: 2.1.2 update: *

VendorCybozu (6c3c6c19-80d3-5353-ad46-e08ec1369448)
ProductGaroon (d176de44-7896-57c4-9c0a-d58b65def00b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-1995 vulnerable 2026-06-08 05:05:27.077351 Details available
Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:58:16.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1994 vulnerable 2026-06-08 05:05:27.076446 Details available
Cross-site scripting (XSS) vulnerability in the Notices portlet in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:58:16.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1993 vulnerable 2026-06-08 05:05:27.075439 Details available
The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:58:16.112Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1988 vulnerable 2026-06-08 05:05:27.057590 Details available
The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.
Published: 2014-05-02T10:00:00.000Z
Updated: 2024-08-06T09:58:15.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0821 vulnerable 2026-06-08 05:05:14.558444 Details available
SQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6930 and CVE-2013-6931.
Published: 2014-02-27T01:00:00.000Z
Updated: 2024-08-06T09:27:20.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0820 vulnerable 2026-06-08 05:05:14.557087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0817 vulnerable 2026-06-08 05:05:14.547890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6930 vulnerable 2026-06-08 05:05:07.373363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0702 vulnerable 2026-06-08 05:03:49.475482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1334 vulnerable 2026-06-08 04:57:58.289984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1333 vulnerable 2026-06-08 04:57:58.286916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1332 vulnerable 2026-06-08 04:57:58.285766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6570 vulnerable 2026-06-08 04:50:55.438616 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6569 vulnerable 2026-06-08 04:50:55.437045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.