CVE-2019-5930: Undefined Security Weakness

Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System'...

PT-2019-17874

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 4.10.0 Description The issue allows remote authenticated attackers to bypass access restrictions and view the Bulletin Board without having the necessary view privileges. This is achieved via the 'Bulletin'...

PT-2019-17872

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 4.6.3 Description The issue allows authenticated attackers to alter information with privileges by invoking the installer via unspecified vectors. Recommendations For Cybozu Garoon versions 4.0.0 through...

CVE-2019-5928: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Customize Item function...

PT-2019-17877

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 4.10.1 Description A directory traversal issue allows remote authenticated attackers to obtain files without access privileges via the application 'Work Flow'. Recommendations For Cybozu Garoon versions 4.0...

CVE-2019-5939: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'...

CVE-2019-5929: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the application 'Memo'...

CVE-2019-5941: Undefined Security Weakness

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges via the application 'Multi Report'...

CVE-2019-5947: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Cabinet'...

CVE-2019-5943: Undefined Security Weakness

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to view the information without view privileges via the application 'Bulletin' and the application 'Cabinet'...

CVE-2019-5931: Improper Input Validation

Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified vectors...

CVE-2019-5944: Undefined Security Weakness

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the contents of application 'Address' without modify privileges via the application 'Address'...

PT-2019-17876

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 4.10.1 Description The issue allows remote authenticated attackers to bypass access restrictions and change user information without proper access privileges. This is achieved via the Item function of User...

CVE-2019-5942: Undefined Security Weakness

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges via the Multiple Files Download function of application 'Cabinet'...

CVE-2019-5933: Undefined Security Weakness

Cybozu Garoon 4.0.0 to 4.10.0 allows remote authenticated attackers to bypass access restriction to view the Bulletin Board without view privileges via the application 'Bulletin'...

CVE-2019-5946: URL Redirection to Untrusted Site

Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen...

PT-2019-17887

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.2.4 through 4.10.1 Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks, via the Login Screen. Recommendations For versions 4.2.4 through 4.10....

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2019-12701)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A cross-site scripting vulnerability exists in Cybozu Garoon versions 4.0.0 through 4.10.1, which originates from...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2019-12698)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A cross-site scripting vulnerability exists in Cybozu Garoon versions 4.0.0 through 4.10.1, which originates from...

Cybozu Garoon path traversal vulnerability (CNVD-2019-12702)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A path traversal vulnerability exists in Cybozu Garoon versions 4.0.0 through 4.10.1, which originates when a...