CNNVD-202602-151 Information

CNNVD ID

CNNVD-202602-151

CVE-2026-22888

  • CNNVD Published: 2026-02-02

Description (Chinese)

Cybozu Garoon是日本才望子(Cybozu)公司的一套门户型OA办公系统。该系统提供门户、E-mail、书签、日程安排、公告栏、文件管理等功能。 Cybozu Garoon 5.0.0至6.0.3版本存在安全漏洞,该漏洞源于输入验证不当,可能导致未经授权更改门户设置并阻止访问产品。

Description (English)

Cybozu Garoon is a web-based OA office system for the company Cybozu in Japan. The system provides portals, e-mails, bookmarks, scheduling, bulletin boards, document management, etc. Cybozu Garoon 5.0.0 to 6.0.3 contains a security loophole, which stems from inappropriate input validation, which may lead to unauthorized changes in portal settings and prevent access to products.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

才望子

Published

2026-02-02

Last Modified

2026-02-24

References

https://kb.cybozu.support/article/39083/ https://jvn.jp/en/jp/JVN35265756/ https://access.redhat.com/security/cve/cve-2026-22888

Patch

https://www.cybozu.com/jp/products/garoon/

Share on: