CVE-2016-1219

Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use...

CVE-2016-1219

Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use...

CVE-2016-1219

CVE-2016-1219 : In Cybozu Garoon, versions prior to 4.2.2 expose an authentication bypass vulnerability related to API usage that lets remote attackers bypass login authentication. The main affected product is Cybozu Garoon (versions up to 4.2.1). The reported impact is remote authentication bypa...

CVE-2016-1214: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2...

CVE-2016-1220: Improper Access Control

Cybozu Garoon before 4.2.2 does not properly restrict access...

PT-2017-7941

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 4.2.2 Description A cross-site scripting XSS issue exists in the "New appointment" function. This allows for potential malicious script execution. Recommendations For versions prior to 4.2.2, update to version...

CVE-2016-1219: Improper Authentication

Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use...

CVE-2016-1216: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2...

CVE-2016-1213: URL Redirection to Untrusted Site

The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites...

PT-2017-7942

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 4.2.2 Description A cross-site scripting XSS issue exists in the "Check available times" function. This allows for potential malicious script execution. Recommendations For versions prior to 4.2.2, update to...

PT-2017-7940

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 4.2.2 Description A cross-site scripting XSS issue exists in the "User details" function. This allows for potential malicious script execution. Recommendations For versions prior to 4.2.2, update to version 4.2....

PT-2017-7939

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 4.2.2 Description A cross-site scripting XSS issue exists in the "Response request" function. This allows for potential malicious script execution. Recommendations For versions prior to 4.2.2, update to version...

PT-2017-7943

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 4.2.2 Description A SQL injection issue has been identified. Recommendations For versions prior to 4.2.2, update to version 4.2.2 or later to resolve the issue...

PT-2017-7945

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 4.2.2 Description The issue is related to improper access restriction. Recommendations For versions prior to 4.2.2, update to version 4.2.2 or later to resolve the issue...

PT-2017-7944

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 4.2.2 Description The issue allows remote attackers to bypass login authentication. This is related to the use of API endpoints, though specific details about the endpoints, such as /api/v1/login, are not...

CVE-2016-1215: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the "User details" function in Cybozu Garoon before 4.2.2...

PT-2017-7938

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 4.2.2 Description The issue concerns the "Scheduler" function, which allows remote attackers to redirect users to arbitrary websites. Recommendations For versions prior to 4.2.2, update to version 4.2.2 or later...

CVE-2016-1218: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cybozu Garoon before 4.2.2...

CVE-2016-1217: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2...

Cybozu Garoon SQL Injection Vulnerability (CNVD-2017-02504)

Cybozu Garoon is a portal OA office system. A SQL injection vulnerability exists in Cybozu Garoon, which allows remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...