CVE-2014-0821

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-27 · updated 2026-06-17
Weakness: CWE-89

Description

SQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6930 and CVE-2013-6931.

Affected products

Cybozu, Inc. Cybozu Garoon: 2.0-sp1, 2.0-sp2, 2.0-sp3, 2.0-sp4, 2.0-sp5, 2.0-sp6 (+44)

References

http://cs.cybozu.co.jp/information/gr20140225up04.php
http://jvn.jp/en/jp/JVN71045461/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000024
http://www.securityfocus.com/bid/65809
https://support.cybozu.com/ja-jp/article/7993
http://cs.cybozu.co.jp/information/gr20140225up04.php
http://jvn.jp/en/jp/JVN71045461/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000024
http://www.securityfocus.com/bid/65809
https://support.cybozu.com/ja-jp/article/7993

Get alerted when CVE-2014-0821 or the next vulnerability affects your stack