Vulnerability Details CVE-2022-28713
Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the product.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.3%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
Products affected by CVE-2022-28713
-
cpe:2.3:a:cybozu:garoon:4.10.0
-
cpe:2.3:a:cybozu:garoon:4.10.1
-
cpe:2.3:a:cybozu:garoon:4.10.2
-
cpe:2.3:a:cybozu:garoon:4.10.3
-
cpe:2.3:a:cybozu:garoon:5.0.0
-
cpe:2.3:a:cybozu:garoon:5.0.1
-
cpe:2.3:a:cybozu:garoon:5.0.2
-
cpe:2.3:a:cybozu:garoon:5.5.0
-
cpe:2.3:a:cybozu:garoon:5.5.1