CVE-2016-1192: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors...

CVE-2016-1195: Undefined Security Weakness

Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL...

CVE-2016-1191: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors...

CVE-2015-7776: Exposure of Sensitive Information to an Unauthorized Actor

Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, a different vulnerability than CVE-2016-1196...

PT-2016-3832

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.x through 4.1.x Description The issue makes it easier for remote attackers to track users via a crafted HTML e-mail message, as it does not properly restrict loading of IMG elements. Recommendations For versions 3.x...

CVE-2016-1197: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775...

PT-2016-3831

Name of the Vulnerable Software and Affected Versions Cybozu Garoon version 4.0.3 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Recommendations For Cybozu Garoon version 4.0.3, update to a version tha...

PT-2016-4634

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.x and 4.x before 4.2.1 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. This can lead to unauthorized access to sensitive informatio...

PT-2016-4636

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 4.2.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 4.2.1, update to version 4.2.1 or...

PT-2016-4632

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.7 through 4.2 Description The issue is related to a directory traversal vulnerability in the logging implementation. This allows remote authenticated users to read a log file. Recommendations For Cybozu Garoon versions...

PT-2016-4635

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.x through 4.2.0 Description The issue allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call. Recommendations For versions 3.x through...

CVE-2015-7775: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-1197...

CVE-2016-1196: Exposure of Sensitive Information to an Unauthorized Actor

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a different vulnerability than CVE-2015-7776...

PT-2016-4631

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.x through 4.2.0 Description A directory traversal issue in the Files function allows remote attackers to modify settings. Recommendations For Cybozu Garoon versions 3.x through 4.2.0, update to version 4.2.1 or later t...

Cybozu Garoon Email Read Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists in Cybozu Garoon...

Cybozu Garoon Cross-Site Scripting Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2016-03716)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting vulnerability exists in...

Cybozu Garoon Open Redirect Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. An open redirection vulnerabilit...

Cybozu Garoon Directory Traversal Vulnerability (CNVD-2016-03721)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A directory traversal vulnerability exists in...

Cybozu Garoon Directory Traversal Vulnerability (CNVD-2016-03722)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A directory traversal...