CVE-2021-20759

Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege...

CVE-2021-20758

Cross-site request forgery CSRF vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to hijack the authentication of administrators and perform an arbitrary operation via unspecified vectors...

CVE-2021-20758

CVE-2021-20758 is a CSRF vulnerability affecting Cybozu Garoon in the Message component, from versions 4.0.0 to 5.0.2. The issue allows a remote authenticated attacker to hijack administrator authentication and perform arbitrary operations via unspecified vectors. The CyVDB/Red Hat/JVN entries la...

CVE-2021-20757

The CVE-2021-20757 issue affects Cybozu Garoon (versions 4.0.0 to 5.0.2) and is described as an operational restrictions bypass in the E-mail module. The vulnerability allows a remote authenticated attacker to alter Portal data without the appropriate privileges. The root cause is an access/privi...

CVE-2021-20757

Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege...

CVE-2021-20756

Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Address without the viewing privilege...

CVE-2021-20755

CVE-2021-20755 (Cybozu Garoon Portal viewing restriction bypass) is a vulnerability in Cybozu Garoon where a user who can log in can obtain portal data without the proper viewing privileges. The CVE is listed with a CVSSv3 base score of 4.3 (CVSSv2 base score 4.0). Affected products include Cyboz...

CVE-2021-20754

Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Workflow without the appropriate privilege...

CVE-2021-20753

Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20753

CVE-2021-20753 describes a cross-site scripting vulnerability in the Scheduler module of Cybozu Garoon, affecting Cybozu Garoon versions 4.0.0 through 5.0.2. The underlying issue is an input handling flaw that allows a remote authenticated attacker to inject arbitrary script via unspecified vecto...

PT-2021-14226 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.5.0 Description: A cross-site scripting issue in some functions of the E-Mail or Group Mail component allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations: For...

Cybozu Garoon Portal Operation Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in the Portal of Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change the data of the portal without proper privileges...

Cybozu Garoon Message Cross-Site Scripting Vulnerability (CNVD-2021-59723)

A cross-site scripting vulnerability exists in Message in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...

Cybozu Garoon Address View Restriction Bypass Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. Address in Cybozu Garoon has a view restriction bypass vulnerability, which can be exploited by attackers to log in to the product to obtain address data without viewing privileges...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2021-59722)

A cross-site scripting vulnerability exists in some functions of Cybozu Garoon's group email. An attacker can exploit this vulnerability to execute arbitrary scripts on the logged-in user's Web browser...

Cybozu Garoon Information Disclosure Vulnerability (CNVD-2021-59718)

Cybozu Garoon, a portal-based OA system of Cybozu Japan, is vulnerable to information disclosure. An attacker can use this vulnerability to obtain data from Comment and Space without viewing privileges...

Cybozu Garoon E-mail Operation Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in e-mail in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change e-mail data without proper privileges...

Cybozu Garoon E-mail Incorrect Input Verification Vulnerability

Cybozu Garoon is a portal type OA office system of Cybozu Japan. A security vulnerability exists in e-mail in Cybozu Garoon. The vulnerability can be exploited by an attacker to alter e-mail data without proper privileges...

Cybozu Garoon View Restriction Bypass Vulnerability

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. A view restriction bypass vulnerability exists in the Portal in Cybozu Garoon. An attacker can use this vulnerability to obtain data from the portal without viewing privileges...

Cybozu Garoon Bulletin Cross-Site Scripting Vulnerability (CNVD-2021-59724)

A cross-site scripting vulnerability exists in Bulletin in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...