Lucene search

K
cve[email protected]CVE-2013-6905
HistoryDec 05, 2013 - 12:55 p.m.

CVE-2013-6905

2013-12-0512:55:36
CWE-79
web.nvd.nist.gov
19
cve-2013-6905
cybozu garoon
xss vulnerability
internet explorer
firefox
remote attack

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

Cross-site scripting (XSS) vulnerability in a phone component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD
Node
cybozugaroonRange3.5sp5
OR
cybozugaroonMatch2.0sp1
OR
cybozugaroonMatch2.0sp2
OR
cybozugaroonMatch2.0sp3
OR
cybozugaroonMatch2.0sp4
OR
cybozugaroonMatch2.0sp5
OR
cybozugaroonMatch2.0sp6
OR
cybozugaroonMatch2.1
OR
cybozugaroonMatch2.1sp1
OR
cybozugaroonMatch2.1sp2
OR
cybozugaroonMatch2.1sp3
OR
cybozugaroonMatch2.5
OR
cybozugaroonMatch2.5sp1
OR
cybozugaroonMatch2.5sp2
OR
cybozugaroonMatch2.5sp3
OR
cybozugaroonMatch2.5sp4
OR
cybozugaroonMatch3.0
OR
cybozugaroonMatch3.0sp1
OR
cybozugaroonMatch3.0sp2
OR
cybozugaroonMatch3.0sp3
OR
cybozugaroonMatch3.1
OR
cybozugaroonMatch3.1sp1
OR
cybozugaroonMatch3.1sp2
OR
cybozugaroonMatch3.1sp3
OR
cybozugaroonMatch3.5
OR
cybozugaroonMatch3.5sp1
OR
cybozugaroonMatch3.5sp2
OR
cybozugaroonMatch3.5sp3
OR
cybozugaroonMatch3.5sp4
AND
mozillafirefox
Node
cybozugaroonRange3.5sp5
OR
cybozugaroonMatch2.0sp1
OR
cybozugaroonMatch2.0sp2
OR
cybozugaroonMatch2.0sp3
OR
cybozugaroonMatch2.0sp4
OR
cybozugaroonMatch2.0sp5
OR
cybozugaroonMatch2.0sp6
OR
cybozugaroonMatch2.1
OR
cybozugaroonMatch2.1sp1
OR
cybozugaroonMatch2.1sp2
OR
cybozugaroonMatch2.1sp3
OR
cybozugaroonMatch2.5
OR
cybozugaroonMatch2.5sp1
OR
cybozugaroonMatch2.5sp2
OR
cybozugaroonMatch2.5sp3
OR
cybozugaroonMatch2.5sp4
OR
cybozugaroonMatch3.0
OR
cybozugaroonMatch3.0sp1
OR
cybozugaroonMatch3.0sp2
OR
cybozugaroonMatch3.0sp3
OR
cybozugaroonMatch3.1
OR
cybozugaroonMatch3.1sp1
OR
cybozugaroonMatch3.1sp2
OR
cybozugaroonMatch3.1sp3
OR
cybozugaroonMatch3.5
OR
cybozugaroonMatch3.5sp1
OR
cybozugaroonMatch3.5sp2
OR
cybozugaroonMatch3.5sp3
OR
cybozugaroonMatch3.5sp4
AND
microsoftinternet_explorer

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

Related for CVE-2013-6905