CVE-2017-2257

CVE-2017-2257 : Cybozu Garoon versions 3.0.0 to 4.2.5 are affected by a cross-site scripting vulnerability in the mail function, allowing an attacker to inject arbitrary web script or HTML. Multiple connected sources (NVD listing and OpenVAS entry for Cybozu Garoon 3.0.0 – 4.2.5) corroborate this...

JVN#63564682: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Denial-of-service DoS vulnerability in the application menu's edit function CWE-20 - CVE-2017-2254 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H| Base Score: 5.5 CVSS...