Skip to content

Cybozu, Inc. · weakness class

SQL Injection

12 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

  1. SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiReport" function.CVE-2016-7803Cybozu, Inc. · 1.6% likely

    CWE-89

  2. SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted API input.CVE-2013-6929Cybozu · 1.6% likely

    CWE-89

  3. SQL injection vulnerability in Cybozu Garoon before 4.2.2.CVE-2016-1218Cybozu · 1.5% likely

    CWE-89

  4. SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2018-0530Cybozu, Inc. · 1.3% likely

    CWE-89

  5. SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2019-5991Cybozu · 1.2% likely

    CWE-89

  6. SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of applica…CVE-2019-5934Cybozu, Inc. · 1.2% likely

    CWE-89

  7. SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via unspec…CVE-2018-0607Cybozu, Inc. · 1.2% likely

    CWE-89

  8. SQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to execute arbitrary SQL commands…CVE-2014-0821Cybozu · 1.0% likely

    CWE-89

  9. SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different…CVE-2013-6931Cybozu · 1.0% likely

    CWE-89

  10. SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 throug…CVE-2013-6930Cybozu · 1.0% likely

    CWE-89

  11. SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.CVE-2013-6001Cybozu · 1.0% likely

    CWE-89

  12. SQL injection vulnerability in Cybozu Garoon 2.5.0 through 3.5.3 allows remote authenticated users to execute arbitrary SQL commands by leveraging a logging privilege.CVE-2013-0701Cybozu · 1.0% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.