CVE-2013-6906

CVE-2013-6906 affects Cybozu Garoon prior to version 3.7.0, specifically a XSS vulnerability in the mail component when using Internet Explorer 6–8. An attacker could inject arbitrary script/HTML via unspecified vectors, potentially compromising user sessions or browser security. The connected JV...