CVE-2014-1995: Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x befor...

Security readout for executives and security teams

This is an authenticated cross-site scripting issue in Cybozu Garoon's Map search feature. A logged-in attacker could inject script or HTML that runs in another user's browser, potentially affecting trust in the portal and user sessions. The sources do not provide a CVSS score or detailed exploit conditions. Exposure is likely limited to organizations still running Cybozu Garoon 2.x or 3.x before 3.7 SP4 with Map search available to authenticated users. Internet-accessible deployments raise business risk, but authentication is required according to the CVE description. Treat as a targeted enterprise application risk, not an internet-wide emergency. Prioritize remediation if legacy Garoon remains in production, especially if externally reachable or used by privileged staff. The absence of KEV evidence lowers urgency, but unsupported collaboration platforms deserve cleanup. Mitigation focus: Upgrade Cybozu Garoon to 3.7 SP4 or later, if still on affected versions.; Review Cybozu and JVN advisories for vendor-specific update guidance.; Restrict Garoon access to trusted networks or VPN where feasible..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.