CVE-2018-0532: Improper Neutralization of Input During Web Page Generation

Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors...

CVE-2018-0533: Undefined Security Weakness

Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified vectors...

CVE-2018-0531: Undefined Security Weakness

Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a folder and/or notification settings via unspecified vectors...

PT-2018-8909

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.6.1 Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For Cybozu Garoon versions 3.0.0 through 4.6.1, update to a versi...

CVE-2018-0549: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2018-8908

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.5.0 through 4.6.1 Description The issue allows remote authenticated attackers to bypass access restrictions, enabling them to view the closed title of "Cabinet" through unspecified vectors. Recommendations For Cybozu...

PT-2018-8889

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.5.0 through 4.2.6 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. Recommendations For versions 3.5.0 through 4.2.6, update to a version that contains a fix for this issue...

PT-2018-8891

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.6 Description The issue allows remote authenticated attackers to bypass access restrictions and alter setting data of the Standard database. The exact vectors used for the attack are not specified...

CVE-2018-0550: Undefined Security Weakness

Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors...

PT-2018-8892

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.6 Description The issue allows remote authenticated attackers to bypass access restrictions and alter setting data of session authentication. Recommendations For versions 3.0.0 through 4.2.6, update to ...

PT-2018-8906

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 4.6.0 Description The issue allows remote authenticated attackers to bypass access restrictions, enabling them to view the closed title of "Space". Recommendations For Cybozu Garoon versions 4.0.0 through...

PT-2018-8890

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.6 Description The issue allows remote authenticated attackers to bypass access restrictions, enabling them to view or alter access privileges of a folder and/or notification settings. Recommendations Fo...

CVE-2018-0530: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-0548: Undefined Security Weakness

Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unspecified vectors...

Cybozu Garoon SQL Injection Vulnerability (CNVD-2018-08343)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A SQL injection vulnerability exists in Cybozu...

Cybozu Garoon Operational Limit Bypass Vulnerability (CNVD-2018-08811)

Cybozu Garoon is an office software with Chinese, Japanese, and English languages. An operation restriction bypass vulnerability exists in the session authentication settings in Cybozu Garoon 3.0.0 through 4.2.6. The vulnerability can be exploited by users logging in to the product with...

Cybozu Garoon Browsing Restriction Bypass Vulnerability (CNVD-2018-08809)

Cybozu Garoon is an office software with Chinese, Japanese, and English languages. A browsing restriction bypass vulnerability exists in the application "Cabinet" in Cybozu Garoon 3.5.0 through 4.6.1. The vulnerability can be exploited by users who can log in to the product to view folder names...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2018-08049)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...

Cybozu Garoon Operation Limit Bypass Vulnerability (CNVD-2018-08812)

Cybozu Garoon is an office software with Chinese, Japanese, and English languages. An operation restriction bypass vulnerability exists in the login authentication settings in Cybozu Garoon 3.0.0 through 4.2.6. The vulnerability can be exploited by users logging in to the product with...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2018-08048)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting vulnerability exists in...