CVE-2021-20767

Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20767

CVE-2021-20767 is a cross-site scripting vulnerability reported in Cybozu Garoon Full Text Search, affecting Cybozu Garoon 4.0.0 to 5.0.2. The Red Hat/NVD/CNVD/CVE records converge on: an arbitrary script may be executed in a logged-in user’s browser due to unspecific vectors in Full Text Search....

CVE-2021-20766

CVE-2021-20766 is a cross-site scripting vulnerability in Cybozu Garoon, affecting 4.0.0 through 5.0.2 in the Message component. An attacker can inject arbitrary scripts via unspecified vectors, potentially leading to code execution in a logged-in user’s browser. The connected records confirm the...

CVE-2021-20766

Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20765

Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20765

CVE-2021-20765 is a Cross-site scripting vulnerability in Cybozu Garoon (Bulletin module) versions 4.0.0–5.0.2. The Red Hat, NVD, CVE list, JVN, CNVD, and PRION records consistently describe an XSS flaw in Bulletin that allows an attacker to inject arbitrary scripts in the context of a logged-in ...

CVE-2021-20764

Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Attaching Files...

CVE-2021-20764

CVE-2021-20764 relates to Cybozu Garoon, where an improper input validation in the Attaching Files feature (affecting Cybozu Garoon 4.0.0–5.0.2) can allow a remote attacker to alter the attached files data. The issue affects multiple Cybozu Garoon product versions listed in the CVE family, includ...

CVE-2021-20763

Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the appropriate privilege...

CVE-2021-20763

CVE-2021-20763 affects Cybozu Garoon Portal (versions 4.0.0–5.0.2). A design/logic flaw (operational restrictions bypass) lets a remote authenticated user obtain portal data without the required privilege. Public sources in the connected documents confirm the vulnerability and indicate remediatio...

CVE-2021-20762

Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated to alter the data of E-mail without the appropriate privilege...

CVE-2021-20762

CVE-2021-20762 is an improper input validation vulnerability in Cybozu Garoon’s E-mail component that allows a remote authenticated attacker to alter E-mail data without the proper privileges. Affected products/versions include Cybozu Garoon 4.0.0 through 5.0.2 (and related ranges noted in connec...

CVE-2021-20761

CVE-2021-20761 concerns Cybozu Garoon. The vulnerability is an improper input validation in the product’s E-mail function, affecting Cybozu Garoon versions 4.0.0 to 5.0.2 . A remote attacker with administrative privileges can alter E-mail data without the appropriate privilege. The connected docu...

CVE-2021-20761

Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker with an administrative privilege to alter the data of E-mail without the appropriate privilege...

CVE-2021-20760

Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of User Profile without the appropriate privilege...

CVE-2021-20760

CVE-2021-20760 affects Cybozu Garoon 4.0.0–5.0.2. It is an improper input validation vulnerability in the User Profile that allows a remote authenticated attacker to alter User Profile data without the proper privilege. Connected sources confirm the affected product/versions and the impact (unaut...

CVE-2021-20759

CVE-2021-20759 affects Cybozu Garoon, specifically the Bulletin feature, where an operational restrictions bypass allows a remote authenticated attacker to alter Portal data without the proper privilege. Affected versions are Cybozu Garoon 4.6.0 through 5.0.2 (per NVD/Red Hat/JVN). The vulnerabil...

CVE-2021-20759

Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege...

CVE-2021-20758

Cross-site request forgery CSRF vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to hijack the authentication of administrators and perform an arbitrary operation via unspecified vectors...

CVE-2021-20758

CVE-2021-20758 is a CSRF vulnerability affecting Cybozu Garoon in the Message component, from versions 4.0.0 to 5.0.2. The issue allows a remote authenticated attacker to hijack administrator authentication and perform arbitrary operations via unspecified vectors. The CyVDB/Red Hat/JVN entries la...