Shuichi Uruma

**Name of the Vulnerable Software and Affected Versions** Cybozu Garoon versions 4.0.0 through 5.9.1 **Description** The issue allows a remote authenticated attacker to bypass operation restrictions in multiple applications, enabling them to alter file information and/or delete files. **Recommendations** For Cybozu Garoon versions 4.0.0 through 5.9.1, update to a version that contains a fix for this issue to prevent unauthorized file modifications and deletions.

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.4 Description: The issue is related to improper access control in Phone Messages, allowing authenticated attackers to bypass access restrictions and obtain data via unspecified vectors. Recommendations: For Cybozu Office versions 10.0.0 through 10.8.4, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.4 Description: The issue is related to improper input validation in the Custom App of Cybozu Office, allowing an authenticated attacker to alter Custom App data via unspecified vectors. Recommendations: For Cybozu Office versions 10.0.0 through 10.8.4, update to a version that includes the fix for the improper input validation vulnerability in the Custom App.

**Name of the Vulnerable Software and Affected Versions** Cybozu Garoon versions 4.0.0 through 4.10.3 **Description** The issue is related to improper authentication, allowing remote attackers to obtain data in the Application Menu. **Recommendations** For Cybozu Garoon versions 4.0.0 through 4.10.3, update to a version that includes a fix for the improper authentication issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cybozu Garoon versions 4.0.0 through 4.10.2 **Description** A mail header injection issue may allow remote authenticated attackers to alter mail headers through the 'E-Mail' application. **Recommendations** For Cybozu Garoon versions 4.0.0 through 4.10.2, update to a version that contains a fix for this issue to prevent mail header injection.

**Name of the Vulnerable Software and Affected Versions** Cybozu Office versions 9.0.0 through 10.4.0 **Description** The issue allows remote attackers to cause a denial of service. **Recommendations** For Cybozu Office versions 9.0.0 through 10.4.0, update to a version that contains a fix for this issue.