CVE-2016-1190: Cybozu Garoon

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors.

Affected products

• Cybozu Garoon: version 3.1.0 only; version 3.1.1 only; version 3.1.2 only; version 3.1.3 only; version 3.5.0 only; version 3.5.1 only; …

Published 2016-06-25. Last modified 2026-06-17.