1922 matches found
CVE-2017-2094
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors...
CVE-2017-2092
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2092
Cybozu Garoon 3.0.0–4.2.3 is affected by CVE-2017-2092 (Cross-site scripting). The vulnerability, in Cybozu Garoon and addressed across connected sources, allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors, potentially enabling arbitrary script ex...
CVE-2017-2093
Cybozu Garoon 3.0.0–4.2.3 is affected by CVE-2017-2093, where remote attackers may obtain tokens used for CSRF protection via unspecified vectors. This affects token disclosure and could assist CSRF exploitation. Affected product: Cybozu Garoon. Root cause details are not specified in the provide...
CVE-2017-2091
Cybozu Garoon 3.0.0 to 4.2.3 is affected by CVE-2017-2091, an access restriction flaw in the Phone Messages function. The issue allows remote authenticated attackers to bypass access restrictions and alter the status of phone messages via unspecified vectors. Affected component: Phone Messages fe...
CVE-2017-2091
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors...
CVE-2017-2095
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors...
CVE-2017-2093
Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors...
CVE-2017-2091: Undefined Security Weakness
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors...
PT-2017-15162
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.3 Description The issue allows remote authenticated attackers to bypass access restrictions in the mail function, leading to an alteration of the order of mail folders. Recommendations For versions 3.0....
PT-2017-15159
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.3 Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For versions 3.0.0 through 4.2.3, update to a version that contai...
CVE-2017-2095: Undefined Security Weakness
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors...
CVE-2017-2092: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2017-15161
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.3 Description The issue allows remote authenticated attackers to bypass access restrictions in Workflow and the "MultiReport" function, potentially altering or deleting information. Recommendations For...
CVE-2017-2094: Improper Privilege Management
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors...
CVE-2017-2093: Exposure of Sensitive Information to an Unauthorized Actor
Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors...
PT-2017-15160
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.3 Description The issue allows remote attackers to obtain tokens used for CSRF protection via unspecified vectors. Recommendations For versions 3.0.0 through 4.2.3, at the moment, there is no informatio...
PT-2017-15158
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.3 Description The issue allows remote authenticated attackers to bypass access restrictions in the Phone Messages function, enabling them to alter the status of phone messages. Recommendations For...
