Lucene search

K
cve[email protected]CVE-2013-6902
HistoryDec 05, 2013 - 12:55 p.m.

CVE-2013-6902

2013-12-0512:55:30
CWE-79
web.nvd.nist.gov
18
cve-2013-6902
cross-site scripting
xss
cybozu garoon
security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD
Node
cybozugaroonRange3.5sp5
OR
cybozugaroonMatch2.0sp1
OR
cybozugaroonMatch2.0sp2
OR
cybozugaroonMatch2.0sp3
OR
cybozugaroonMatch2.0sp4
OR
cybozugaroonMatch2.0sp5
OR
cybozugaroonMatch2.0sp6
OR
cybozugaroonMatch2.1
OR
cybozugaroonMatch2.1sp1
OR
cybozugaroonMatch2.1sp2
OR
cybozugaroonMatch2.1sp3
OR
cybozugaroonMatch2.5
OR
cybozugaroonMatch2.5sp1
OR
cybozugaroonMatch2.5sp2
OR
cybozugaroonMatch2.5sp3
OR
cybozugaroonMatch2.5sp4
OR
cybozugaroonMatch3.0
OR
cybozugaroonMatch3.0sp1
OR
cybozugaroonMatch3.0sp2
OR
cybozugaroonMatch3.0sp3
OR
cybozugaroonMatch3.1
OR
cybozugaroonMatch3.1sp1
OR
cybozugaroonMatch3.1sp2
OR
cybozugaroonMatch3.1sp3
OR
cybozugaroonMatch3.5
OR
cybozugaroonMatch3.5sp1
OR
cybozugaroonMatch3.5sp2
OR
cybozugaroonMatch3.5sp3
OR
cybozugaroonMatch3.5sp4

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

Related for CVE-2013-6902