PT-2026-5615

CVE-2026-20711

Published

2026-02-02

Updated

2026-02-02

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 5.0.0 through 6.0.3

Description A cross-site scripting issue exists in the E-mail function. This could allow an attacker to reset passwords for any user.

Recommendations Update to a version later than 6.0.3.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾