Lucene search

K
cve[email protected]CVE-2013-6001
HistoryDec 05, 2013 - 12:55 p.m.

CVE-2013-6001

2013-12-0512:55:30
CWE-89
web.nvd.nist.gov
20
cve-2013-6001
sql injection
cybozu garoon
nvd
security vulnerability

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.3%

SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD
Node
cybozugaroonRange3.7
OR
cybozugaroonMatch2.0sp1
OR
cybozugaroonMatch2.0sp2
OR
cybozugaroonMatch2.0sp3
OR
cybozugaroonMatch2.0sp4
OR
cybozugaroonMatch2.0sp5
OR
cybozugaroonMatch2.0sp6
OR
cybozugaroonMatch2.1
OR
cybozugaroonMatch2.1sp1
OR
cybozugaroonMatch2.1sp2
OR
cybozugaroonMatch2.1sp3
OR
cybozugaroonMatch2.5
OR
cybozugaroonMatch2.5sp1
OR
cybozugaroonMatch2.5sp2
OR
cybozugaroonMatch2.5sp3
OR
cybozugaroonMatch2.5sp4
OR
cybozugaroonMatch3.0
OR
cybozugaroonMatch3.0sp1
OR
cybozugaroonMatch3.0sp2
OR
cybozugaroonMatch3.0sp3
OR
cybozugaroonMatch3.1
OR
cybozugaroonMatch3.1sp1
OR
cybozugaroonMatch3.1sp2
OR
cybozugaroonMatch3.1sp3
OR
cybozugaroonMatch3.5
OR
cybozugaroonMatch3.5sp1
OR
cybozugaroonMatch3.5sp2
OR
cybozugaroonMatch3.5sp3
OR
cybozugaroonMatch3.5sp4
OR
cybozugaroonMatch3.5sp5

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.3%

Related for CVE-2013-6001