CVE-2016-1214

Cross-site scripting XSS vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2...

CVE-2016-1214

Cross-site scripting XSS vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2...

CVE-2016-1214

CVE-2016-1214 affects Cybozu Garoon, where the vulnerability is a cross-site scripting (XSS) flaw in the "Response request" function present before Garoon 4.2.2. The impact is that an arbitrary script can be executed in the logged-in user’s browser. This CVE is documented with explicit affected s...

JVN#67595539: Cybozu Garoon multiple cross-site scripting vulnerabilities

Cybozu Garoon provided by Cybozu,Inc. is a groupware. Cybozu Garoon contains multiple cross-site scripting vulnerabilities. Cross-site scripting in the "Response request" function - CVE-2016-1214 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score:...