Cybozu
Number 95 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
201
Critical
1
High
2
Known Exploited
0
Exploit available
0
Network, no login needed
29.4%
Of 17 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 4 | 0 | 0 | 4 | 0 | 0 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2024 | 11 | 1 | 1 | 9 | 0 | 0 |
| 2023 | 5 | 0 | 0 | 1 | 0 | 4 |
| 2022 | 32 | 0 | 1 | 0 | 0 | 31 |
| 2021 | 47 | 0 | 0 | 0 | 0 | 47 |
| 2020 | 20 | 0 | 0 | 0 | 0 | 20 |
| 2019 | 32 | 0 | 0 | 0 | 0 | 32 |
| 2018 | 19 | 0 | 0 | 0 | 0 | 19 |
| 2017 | 31 | 0 | 0 | 0 | 0 | 31 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Cybozu Garoon | 128 | 1 |
| Cybozu Office | 38 | 0 |
| Cybozu Remote Service | 20 | 1 |
| Cybozu Mailwise | 4 | 0 |
| Cybozu Dezie | 3 | 0 |
| Cybozu KUNAI for Android | 3 | 1 |
| Android App 'Mailwise for Android' | 1 | 0 |
| Android App 'kintone mobile for Android' | 1 | 0 |
| Cybozu Desktop for Windows | 1 | 0 |
| Remote Service Manager | 1 | 0 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Cross-Site Scripting | 5 | 1 |
| Incorrect Authorization | 3 | 0 |
| Denial of Service | 2 | 1 |
| Insecure Storage of Sensitive Information | 2 | 0 |
| Improper Handling of Extra Values | 1 | 0 |
| Improper handling of extra values | 1 | 0 |
| Information Disclosure | 1 | 0 |
| Missing Authorization | 1 | 0 |
| Untrusted Search Path | 1 | 1 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-57279 | Cybozu Garoon: Cross-Site Scripting | Medium | 0.3% | |
| CVE-2026-22888 | Cybozu Garoon vulnerability | Medium | 0.4% | |
| CVE-2026-22881 | Cybozu Garoon: Cross-Site Scripting | Medium | 0.2% | |
| CVE-2026-20711 | Cybozu Garoon: Cross-Site Scripting | Medium | 0.3% | |
| CVE-2024-39817 | Cybozu Office: Information Disclosure | Medium | 0.4% | |
| CVE-2024-39457 | Cybozu Garoon: Cross-Site Scripting | Medium | 0.2% | |
| CVE-2024-31404 | Cybozu Garoon vulnerability | Medium | 0.3% | |
| CVE-2024-31403 | Cybozu Garoon: Incorrect Authorization | Medium | 0.3% | |
| CVE-2024-31402 | Cybozu Garoon: Incorrect Authorization | Medium | 0.3% | |
| CVE-2024-31401 | Cybozu Garoon: Cross-Site Scripting | Critical | 0.5% |