CVE-2021-20757

The CVE-2021-20757 issue affects Cybozu Garoon (versions 4.0.0 to 5.0.2) and is described as an operational restrictions bypass in the E-mail module. The vulnerability allows a remote authenticated attacker to alter Portal data without the appropriate privileges. The root cause is an access/privi...

CVE-2021-20757

Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege...

CVE-2021-20756

CVE-2021-20756 affects Cybozu Garoon Address module (versions 4.0.0–5.0.2). The vulnerability is a viewing restrictions bypass that allows a remote authenticated attacker to obtain address data without the proper viewing privilege. Impact is consistent with other Cybozu Garoon disclosures in the ...

CVE-2021-20756

Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Address without the viewing privilege...

CVE-2021-20755

CVE-2021-20755 (Cybozu Garoon Portal viewing restriction bypass) is a vulnerability in Cybozu Garoon where a user who can log in can obtain portal data without the proper viewing privileges. The CVE is listed with a CVSSv3 base score of 4.3 (CVSSv2 base score 4.0). Affected products include Cyboz...

CVE-2021-20755

Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the viewing privilege...

CVE-2021-20754

Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Workflow without the appropriate privilege...

CVE-2021-20754

CVE-2021-20754 involves Cybozu Garoon Workflow improper input validation. Affected: Cybozu Garoon versions 4.0.0–5.0.2. Vulnerability allows a remote authenticated attacker to alter Workflow data without the appropriate privilege (root cause: input validation flaw in the Workflow component). Impa...

CVE-2021-20753

Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20753

CVE-2021-20753 describes a cross-site scripting vulnerability in the Scheduler module of Cybozu Garoon, affecting Cybozu Garoon versions 4.0.0 through 5.0.2. The underlying issue is an input handling flaw that allows a remote authenticated attacker to inject arbitrary script via unspecified vecto...

PT-2021-14226 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.5.0 Description: A cross-site scripting issue in some functions of the E-Mail or Group Mail component allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations: For...

Cybozu Garoon Bulletin Information Disclosure Vulnerability

Cybozu Garoon is a portal-based OA office system of Cybozu Japan. An information disclosure vulnerability exists in Bulletin in Cybozu Garoon. An attacker can use this vulnerability to obtain the title of an announcement without viewing privileges...

Cybozu Garoon Bulletin Cross-Site Scripting Vulnerability (CNVD-2021-59724)

A cross-site scripting vulnerability exists in Bulletin in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2021-59722)

A cross-site scripting vulnerability exists in some functions of Cybozu Garoon's group email. An attacker can exploit this vulnerability to execute arbitrary scripts on the logged-in user's Web browser...

Cybozu Garoon Workflow Incorrect Input Validation Vulnerability

A security vulnerability exists in Workflow in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to change workflow data without proper privileges...

Cybozu Garoon E-mail Operation Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in e-mail in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change e-mail data without proper privileges...

Cybozu Garoon Full Text Search Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Full Text Search in Cybozu Garoon, a portal-based OA system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...

Cybozu Garoon Information Disclosure Vulnerability (CNVD-2021-59718)

Cybozu Garoon, a portal-based OA system of Cybozu Japan, is vulnerable to information disclosure. An attacker can use this vulnerability to obtain data from Comment and Space without viewing privileges...

Cybozu Garoon Message Cross-Site Request Forgery Vulnerability

A cross-site request forgery vulnerability exists in Message in Cybozu Garoon, a portal-based OA system from Cybozu Japan. An attacker could use this vulnerability to trick users into performing unintended actions...

Cybozu Garoon Scheduler and MultiReport Operation Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to delete data from Scheduler and MultiReport without proper privileges...