CVE-2013-6002

CVE-2013-6002: Cybozu Garoon server prior to 3.7 SP1 is vulnerable to DoS (high CPU usage) via unspecified vectors. Affected: Cybozu Garoon 3.7 and earlier. Root cause details are not publicly disclosed in the provided documents. Remedy: update to the latest Cybozu Garoon version per vendor advis...

CVE-2013-6915

CVE-2013-6915 is a cross-site scripting (XSS) vulnerability in the system-administration component of Cybozu Garoon up to version 3.7.2 (i.e., affected product: Cybozu Garoon; vulnerable version: before 3.7.2). The provided connected documents consistently describe multiple XSS flaws that allow r...

CVE-2013-6910

Cross-site scripting XSS vulnerability in Ajax components in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6003

CVE-2013-6003 affects Cybozu Garoon 3.1–3.5 SP5. A CRLF injection vulnerability exists in the Phone Messages forwarding feature that allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors. The root cause is improper handling of header data during mail forward...

CVE-2013-6905

CVE-2013-6905 is a cross-site scripting (XSS) vulnerability in the Cybozu Garoon phone component affecting Garoon 3.7.x and earlier when using Internet Explorer or Firefox. The exact vectors are unspecified in the provided sources, but the issue allows remote attackers to inject arbitrary web scr...

CVE-2013-6900

Cross-site scripting XSS vulnerability in the system-administration component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6916

Cross-site scripting XSS vulnerability in the Yahoo! User Interface Library in Cybozu Garoon before 3.7.2, when Internet Explorer 9 or 10 or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6911

Cross-site scripting XSS vulnerability in the bulletin-board component in Cybozu Garoon before 3.7.2, when Internet Explorer or Firefox is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6913

CVE-2013-6913 affects Cybozu Garoon (groupware) with a vulnerability in the search component that enables cross-site scripting (XSS) when using Internet Explorer. The issue targets Garoon versions before 3.7.2 and can be triggered by remote authenticated users via unspecified vectors, potentially...

CVE-2013-6003

CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors...

CVE-2013-6902

Cross-site scripting XSS vulnerability in the Space function in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6912

Cross-site scripting XSS vulnerability in a calendar component in Cybozu Garoon before 3.7.2, when Internet Explorer 6 through 9 is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6901

Cross-site scripting XSS vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6904

Cross-site scripting XSS vulnerability in a note component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6907

Cross-site scripting XSS vulnerability in a mail component in Cybozu Garoon 2.x and 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6908

Cybozu Garoon 3.x prior to 3.7.0 contains a cross‑site scripting (XSS) vulnerability in the mail component that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Exploitation status is not detailed in the provided documents. Affected product versions are Garo...

CVE-2013-6903

Cross-site scripting XSS vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6903

The CVE-2013-6903 entry describes a Cross-site scripting (XSS) vulnerability in the scheduling component of Cybozu Garoon, affecting Garoon before 3.7.0. The issue can be triggered when using Internet Explorer or Firefox, allowing remote attackers to inject arbitrary web script or HTML via unspec...

CVE-2013-6001

Cybozu Garoon CVE-2013-6001 affects the Space function in Cybozu Garoon 3.7 and earlier. The vulnerability is an SQL injection that can be exploited by a user who can log in and is authenticated, allowing arbitrary SQL commands to be executed in the product’s database via unspecified vectors. Rem...

CVE-2013-6916

CVE-2013-6916 covers multiple XSS vulnerabilities in Cybozu Garoon’s Yahoo! UI Library prior to 3.7.2, exploitable when using IE9/10 or Chrome. Attackers could inject arbitrary script/HTML via unspecified vectors in the web application. Connected sources (JVN entries) confirm Cybozu Garoon 3.7.2-...