Lucene search

K
cve[email protected]CVE-2013-6911
HistoryDec 05, 2013 - 12:55 p.m.

CVE-2013-6911

2013-12-0512:55:37
CWE-79
web.nvd.nist.gov
18
cve-2013-6911
cross-site scripting
xss
cybozu garoon
bulletin-board
internet explorer
firefox
remote authenticated users
web script
html
nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.7%

Cross-site scripting (XSS) vulnerability in the bulletin-board component in Cybozu Garoon before 3.7.2, when Internet Explorer or Firefox is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD
Node
cybozugaroonRange3.7sp1
OR
cybozugaroonMatch2.0sp1
OR
cybozugaroonMatch2.0sp2
OR
cybozugaroonMatch2.0sp3
OR
cybozugaroonMatch2.0sp4
OR
cybozugaroonMatch2.0sp5
OR
cybozugaroonMatch2.0sp6
OR
cybozugaroonMatch2.1
OR
cybozugaroonMatch2.1sp1
OR
cybozugaroonMatch2.1sp2
OR
cybozugaroonMatch2.1sp3
OR
cybozugaroonMatch2.5
OR
cybozugaroonMatch2.5sp1
OR
cybozugaroonMatch2.5sp2
OR
cybozugaroonMatch2.5sp3
OR
cybozugaroonMatch2.5sp4
OR
cybozugaroonMatch3.0
OR
cybozugaroonMatch3.0sp1
OR
cybozugaroonMatch3.0sp2
OR
cybozugaroonMatch3.0sp3
OR
cybozugaroonMatch3.1
OR
cybozugaroonMatch3.1sp1
OR
cybozugaroonMatch3.1sp2
OR
cybozugaroonMatch3.1sp3
OR
cybozugaroonMatch3.5
OR
cybozugaroonMatch3.5sp1
OR
cybozugaroonMatch3.5sp2
OR
cybozugaroonMatch3.5sp3
OR
cybozugaroonMatch3.5sp4
OR
cybozugaroonMatch3.5sp5
OR
cybozugaroonMatch3.7
AND
mozillafirefox
Node
cybozugaroonRange3.7sp1
OR
cybozugaroonMatch2.0sp1
OR
cybozugaroonMatch2.0sp2
OR
cybozugaroonMatch2.0sp3
OR
cybozugaroonMatch2.0sp4
OR
cybozugaroonMatch2.0sp5
OR
cybozugaroonMatch2.0sp6
OR
cybozugaroonMatch2.1
OR
cybozugaroonMatch2.1sp1
OR
cybozugaroonMatch2.1sp2
OR
cybozugaroonMatch2.1sp3
OR
cybozugaroonMatch2.5
OR
cybozugaroonMatch2.5sp1
OR
cybozugaroonMatch2.5sp2
OR
cybozugaroonMatch2.5sp3
OR
cybozugaroonMatch2.5sp4
OR
cybozugaroonMatch3.0
OR
cybozugaroonMatch3.0sp1
OR
cybozugaroonMatch3.0sp2
OR
cybozugaroonMatch3.0sp3
OR
cybozugaroonMatch3.1
OR
cybozugaroonMatch3.1sp1
OR
cybozugaroonMatch3.1sp2
OR
cybozugaroonMatch3.1sp3
OR
cybozugaroonMatch3.5
OR
cybozugaroonMatch3.5sp1
OR
cybozugaroonMatch3.5sp2
OR
cybozugaroonMatch3.5sp3
OR
cybozugaroonMatch3.5sp4
OR
cybozugaroonMatch3.5sp5
OR
cybozugaroonMatch3.7
AND
microsoftinternet_explorer

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.7%

Related for CVE-2013-6911