CVE-2021-20765

Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20765

CVE-2021-20765 is a Cross-site scripting vulnerability in Cybozu Garoon (Bulletin module) versions 4.0.0–5.0.2. The Red Hat, NVD, CVE list, JVN, CNVD, and PRION records consistently describe an XSS flaw in Bulletin that allows an attacker to inject arbitrary scripts in the context of a logged-in ...

CVE-2021-20764

Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Attaching Files...

CVE-2021-20764

CVE-2021-20764 relates to Cybozu Garoon, where an improper input validation in the Attaching Files feature (affecting Cybozu Garoon 4.0.0–5.0.2) can allow a remote attacker to alter the attached files data. The issue affects multiple Cybozu Garoon product versions listed in the CVE family, includ...

CVE-2021-20763

Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the appropriate privilege...

CVE-2021-20763

CVE-2021-20763 affects Cybozu Garoon Portal (versions 4.0.0–5.0.2). A design/logic flaw (operational restrictions bypass) lets a remote authenticated user obtain portal data without the required privilege. Public sources in the connected documents confirm the vulnerability and indicate remediatio...

CVE-2021-20762

Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated to alter the data of E-mail without the appropriate privilege...

CVE-2021-20762

CVE-2021-20762 is an improper input validation vulnerability in Cybozu Garoon’s E-mail component that allows a remote authenticated attacker to alter E-mail data without the proper privileges. Affected products/versions include Cybozu Garoon 4.0.0 through 5.0.2 (and related ranges noted in connec...

CVE-2021-20761

CVE-2021-20761 concerns Cybozu Garoon. The vulnerability is an improper input validation in the product’s E-mail function, affecting Cybozu Garoon versions 4.0.0 to 5.0.2 . A remote attacker with administrative privileges can alter E-mail data without the appropriate privilege. The connected docu...

CVE-2021-20761

Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker with an administrative privilege to alter the data of E-mail without the appropriate privilege...

CVE-2021-20760

Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of User Profile without the appropriate privilege...

CVE-2021-20760

CVE-2021-20760 affects Cybozu Garoon 4.0.0–5.0.2. It is an improper input validation vulnerability in the User Profile that allows a remote authenticated attacker to alter User Profile data without the proper privilege. Connected sources confirm the affected product/versions and the impact (unaut...

CVE-2021-20759

CVE-2021-20759 affects Cybozu Garoon, specifically the Bulletin feature, where an operational restrictions bypass allows a remote authenticated attacker to alter Portal data without the proper privilege. Affected versions are Cybozu Garoon 4.6.0 through 5.0.2 (per NVD/Red Hat/JVN). The vulnerabil...

CVE-2021-20759

Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege...

CVE-2021-20758

Cross-site request forgery CSRF vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to hijack the authentication of administrators and perform an arbitrary operation via unspecified vectors...

CVE-2021-20758

CVE-2021-20758 is a CSRF vulnerability affecting Cybozu Garoon in the Message component, from versions 4.0.0 to 5.0.2. The issue allows a remote authenticated attacker to hijack administrator authentication and perform arbitrary operations via unspecified vectors. The CyVDB/Red Hat/JVN entries la...

CVE-2021-20757

The CVE-2021-20757 issue affects Cybozu Garoon (versions 4.0.0 to 5.0.2) and is described as an operational restrictions bypass in the E-mail module. The vulnerability allows a remote authenticated attacker to alter Portal data without the appropriate privileges. The root cause is an access/privi...

CVE-2021-20757

Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege...

CVE-2021-20756

Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Address without the viewing privilege...

CVE-2021-20755

CVE-2021-20755 (Cybozu Garoon Portal viewing restriction bypass) is a vulnerability in Cybozu Garoon where a user who can log in can obtain portal data without the proper viewing privileges. The CVE is listed with a CVSSv3 base score of 4.3 (CVSSv2 base score 4.0). Affected products include Cyboz...