Lucene search

K
cve[email protected]CVE-2013-6913
HistoryDec 05, 2013 - 12:55 p.m.

CVE-2013-6913

2013-12-0512:55:37
CWE-79
web.nvd.nist.gov
17
cve-2013-6913
cross-site scripting
xss
cybozu garoon
internet explorer
remote authenticated users
web script
html
nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.4%

Cross-site scripting (XSS) vulnerability in a search component in Cybozu Garoon before 3.7.2, when Internet Explorer is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD
Node
cybozugaroonRange3.7sp1
OR
cybozugaroonMatch2.0sp1
OR
cybozugaroonMatch2.0sp2
OR
cybozugaroonMatch2.0sp3
OR
cybozugaroonMatch2.0sp4
OR
cybozugaroonMatch2.0sp5
OR
cybozugaroonMatch2.0sp6
OR
cybozugaroonMatch2.1
OR
cybozugaroonMatch2.1sp1
OR
cybozugaroonMatch2.1sp2
OR
cybozugaroonMatch2.1sp3
OR
cybozugaroonMatch2.5
OR
cybozugaroonMatch2.5sp1
OR
cybozugaroonMatch2.5sp2
OR
cybozugaroonMatch2.5sp3
OR
cybozugaroonMatch2.5sp4
OR
cybozugaroonMatch3.0
OR
cybozugaroonMatch3.0sp1
OR
cybozugaroonMatch3.0sp2
OR
cybozugaroonMatch3.0sp3
OR
cybozugaroonMatch3.1
OR
cybozugaroonMatch3.1sp1
OR
cybozugaroonMatch3.1sp2
OR
cybozugaroonMatch3.1sp3
OR
cybozugaroonMatch3.5
OR
cybozugaroonMatch3.5sp1
OR
cybozugaroonMatch3.5sp2
OR
cybozugaroonMatch3.5sp3
OR
cybozugaroonMatch3.5sp4
OR
cybozugaroonMatch3.5sp5
OR
cybozugaroonMatch3.7
AND
microsoftinternet_explorer

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.4%

Related for CVE-2013-6913