https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-22888.htmlhttps://patchthecve.com/cve/CVE-2026-22888.htmlWed, 17 Jun 2026 10:20:33 +0000HIGH 7.5: Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.https://patchthecve.com/cve/CVE-2026-22881.htmlhttps://patchthecve.com/cve/CVE-2026-22881.htmlWed, 17 Jun 2026 10:20:33 +0000MEDIUM 5.4: Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.https://patchthecve.com/cve/CVE-2026-20711.htmlhttps://patchthecve.com/cve/CVE-2026-20711.htmlWed, 17 Jun 2026 10:17:43 +0000MEDIUM 6.1: Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.https://patchthecve.com/cve/CVE-2024-39817.htmlhttps://patchthecve.com/cve/CVE-2024-39817.htmlWed, 17 Jun 2026 07:42:51 +0000MEDIUM 6.5: Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App.https://patchthecve.com/cve/CVE-2024-39457.htmlhttps://patchthecve.com/cve/CVE-2024-39457.htmlWed, 17 Jun 2026 07:41:57 +0000MEDIUM 5.4: Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user’s web browser.https://patchthecve.com/cve/CVE-2024-31402.htmlhttps://patchthecve.com/cve/CVE-2024-31402.htmlWed, 17 Jun 2026 07:28:22 +0000MEDIUM 4.3: Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker to delete the data of Shared To-Dos.https://patchthecve.com/cve/CVE-2024-31399.htmlhttps://patchthecve.com/cve/CVE-2024-31399.htmlWed, 17 Jun 2026 07:28:21 +0000MEDIUM 6.5: Excessive platform resource consumption within a loop issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, processing a crafted mail may cause a denial-of-service (DoS) condition.https://patchthecve.com/cve/CVE-2024-31398.htmlhttps://patchthecve.com/cve/CVE-2024-31398.htmlWed, 17 Jun 2026 07:28:21 +0000MEDIUM 4.3: Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, a user who can log in to the product may obtain information on the list of users.https://patchthecve.com/cve/CVE-2024-31397.htmlhttps://patchthecve.com/cve/CVE-2024-31397.htmlWed, 17 Jun 2026 07:28:21 +0000MEDIUM 4.9: Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, a user who can log in to the product with the administrative privilege may be able to cause a denial-of-service (DoS) condition.https://patchthecve.com/cve/CVE-2024-31404.htmlhttps://patchthecve.com/cve/CVE-2024-31404.htmlWed, 17 Jun 2026 07:28:22 +0000MEDIUM 4.3: Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.5.0 to 6.0.0, which may allow a user who can log in to the product to view the data of Scheduler.https://patchthecve.com/cve/CVE-2024-31403.htmlhttps://patchthecve.com/cve/CVE-2024-31403.htmlWed, 17 Jun 2026 07:28:22 +0000MEDIUM 5.4: Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 6.0.0 allows a remote authenticated attacker to alter and/or obtain the data of Memo.https://patchthecve.com/cve/CVE-2024-31401.htmlhttps://patchthecve.com/cve/CVE-2024-31401.htmlWed, 17 Jun 2026 07:28:22 +0000CRITICAL 9.0: Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script on the web browser of the user who is logging in to the product.https://patchthecve.com/cve/CVE-2024-31400.htmlhttps://patchthecve.com/cve/CVE-2024-31400.htmlWed, 17 Jun 2026 07:28:22 +0000MEDIUM 6.5: Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.0.0 to 5.15.0. If this vulnerability is exploited, unintended data may be left in forwarded mail.