Lucene search
HistoryJun 11, 2024 - 5:15 a.m.
CVE-2024-31401
cross-site scripting
cybozu garoon
remote attacker
script injection
9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.2%
Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script on the web browser of the user who is logging in to the product.
Related
cvelist
cvelist
CVE-2024-31401
2024-06-11 04:26:53
vulnrichment
vulnrichment
CVE-2024-31401
2024-06-11 04:26:53
cve
cve
CVE-2024-31401
2024-06-11 05:15:53
jvn
jvn
JVN#28869536: Multiple vulnerabilities in Cybozu Garoon
2024-05-13 00:00:00
9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.2%
Related for NVD:CVE-2024-31401