PatchTheCVEgaroon vulnerabilities and fixes
Recent CVEs affecting garoon, with upgrade or downgrade steps. 12 tracked.
garoon has 12 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 12. Most recent: 2026-02-02. Highest priority: CVE-2024-31401 (score 42/100).
- CVE-2026-22888 HIGH 7.5 UPGRADE Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alter
- CVE-2026-22881 MEDIUM 5.4 UPGRADE Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allo
- CVE-2026-20711 MEDIUM 6.1 UPGRADE Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow
- CVE-2024-39457 MEDIUM 5.4 UPGRADE Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview
- CVE-2024-31404 MEDIUM 4.3 UPGRADE Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.5.0 to 6.0.0, which may allo
- CVE-2024-31403 MEDIUM 5.4 UPGRADE Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 6.0.0 allows a remote authenticated attacker t
- CVE-2024-31402 MEDIUM 4.3 UPGRADE Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker
- CVE-2024-31401 CRITICAL 9.0 UPGRADE Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker wit
- CVE-2024-31400 MEDIUM 6.5 UPGRADE Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.0
- CVE-2024-31399 MEDIUM 6.5 UPGRADE Excessive platform resource consumption within a loop issue exists in Cybozu Garoon 5.0.0 to 5.15.2
- CVE-2024-31398 MEDIUM 4.3 UPGRADE Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.2
- CVE-2024-31397 MEDIUM 4.9 UPGRADE Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2
FAQ
How do I fix garoon vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is garoon being exploited right now?
None of the tracked garoon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which garoon CVE should I patch first?
CVE-2024-31401 currently ranks highest (42/100): Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker wit.