CVE-2022-28713: Cybozu Garoon

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the product.

Affected products

• Cybozu Garoon: from 4.10.0, up to and including 5.5.1

Published 2022-07-04. Last modified 2026-06-17.