Lucene search
HistoryJul 20, 2014 - 11:12 a.m.
CVE-2014-1987
cybozu
garoon
remote code execution
cve-2014-1987
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.9%
The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected configurations
Node
cybozugaroonMatch3.1.0
ORcybozugaroonMatch3.1.1
ORcybozugaroonMatch3.1.2
ORcybozugaroonMatch3.1.3
ORcybozugaroonMatch3.5.0
ORcybozugaroonMatch3.5.1
ORcybozugaroonMatch3.5.2
ORcybozugaroonMatch3.5.3
ORcybozugaroonMatch3.5.4
ORcybozugaroonMatch3.5.5
ORcybozugaroonMatch3.7sp1
ORcybozugaroonMatch3.7sp2
ORcybozugaroonMatch3.7sp3
Related
jvn
jvn
JVN#42024228: Cybozu Garoon CGI vulnerable to remote command execution
2014-07-15 00:00:00
nvd
nvd
CVE-2014-1987
2014-07-20 11:12:49
prion
prion
Design/Logic Flaw
2014-07-20 11:12:00
cvelist
cvelist
CVE-2014-1987
2014-07-20 10:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.9%
Related for CVE-2014-1987