CVE-2013-6002: Undefined Security Weakness

The server in Cybozu Garoon before 3.7 SP1 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors...

CVE-2013-6903: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6914: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a calendar component in Cybozu Garoon before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6003: Improper Input Validation

CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbitrary e-mail headers via unspecified vectors...

PT-2013-6174

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the note component of Cybozu Garoon, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors when using Internet...

PT-2013-6175

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors when using Internet Explorer or Firefox. Recommendations For...

PT-2013-6171

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the Space function of Cybozu Garoon, specifically when used with Firefox, allowing remote attackers to inject arbitrary web script or HTML...

PT-2013-6173

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the schedule component of Cybozu Garoon, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors when using Internet...

CVE-2013-6004: Undefined Security Weakness

Session fixation vulnerability in Cybozu Garoon before 3.7.2 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2013-6909: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a report component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6904: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a note component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-6184

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.2 Description A cross-site scripting XSS issue exists in the calendar component, allowing remote authenticated users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors...

PT-2013-6178

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system...

PT-2013-6172

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the Space function, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations Fo...

CVE-2013-6907: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a mail component in Cybozu Garoon 2.x and 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6905: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a phone component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6901: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a search component in Cybozu Garoon before 3.7.2, when Internet Explorer is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6910: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ajax components in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6911: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the bulletin-board component in Cybozu Garoon before 3.7.2, when Internet Explorer or Firefox is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...