CVE-2016-1189: Cybozu Garoon

High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying a portlet via unspecified vectors.

Affected products

• Cybozu Garoon: version 3.1.0 only; version 3.1.1 only; version 3.1.2 only; version 3.1.3 only; version 3.5.0 only; version 3.5.1 only; …

Published 2016-06-25. Last modified 2026-06-17.