Cybozu Garoon 3.7 Service Pack 3
Approved changes feed: RSS · Atom
cpe:2.3:a:cybozu:garoon:3.7:sp3:*:*:*:*:*:*
part: a version: 3.7 update: sp3
| Vendor | Cybozu (6c3c6c19-80d3-5353-ad46-e08ec1369448) |
|---|---|
| Product | Garoon (d176de44-7896-57c4-9c0a-d58b65def00b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-2146 |
vulnerable | 2026-06-08 05:09:23.691870 |
Details available
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu.
Published: 2017-07-07T13:00:00.000Z
Updated: 2024-08-05T13:48:05.030Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5649 |
vulnerable | 2026-06-08 05:06:50.655180 |
Details available
Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain group-administration privileges.
Published: 2015-10-08T20:00:00.000Z
Updated: 2024-08-06T06:59:03.498Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1996 |
vulnerable | 2026-06-08 05:05:27.078071 |
Details available
Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:58:16.265Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1995 |
vulnerable | 2026-06-08 05:05:27.077724 |
Details available
Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:58:16.229Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1994 |
vulnerable | 2026-06-08 05:05:27.076817 |
Details available
Cross-site scripting (XSS) vulnerability in the Notices portlet in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-07-20T10:00:00.000Z
Updated: 2024-08-06T09:58:16.058Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1993 |
vulnerable | 2026-06-08 05:05:27.075952 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1992 |
vulnerable | 2026-06-08 05:05:27.074942 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1989 |
vulnerable | 2026-06-08 05:05:27.066465 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1987 |
vulnerable | 2026-06-08 05:05:27.054597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0821 |
vulnerable | 2026-06-08 05:05:14.558988 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0820 |
vulnerable | 2026-06-08 05:05:14.557573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0817 |
vulnerable | 2026-06-08 05:05:14.554312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.