CVE-2021-20754

Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Workflow without the appropriate privilege...

CVE-2021-20753

Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20753

CVE-2021-20753 describes a cross-site scripting vulnerability in the Scheduler module of Cybozu Garoon, affecting Cybozu Garoon versions 4.0.0 through 5.0.2. The underlying issue is an input handling flaw that allows a remote authenticated attacker to inject arbitrary script via unspecified vecto...

PT-2021-14226 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.5.0 Description: A cross-site scripting issue in some functions of the E-Mail or Group Mail component allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations: For...

Cybozu Garoon Message Cross-Site Request Forgery Vulnerability

A cross-site request forgery vulnerability exists in Message in Cybozu Garoon, a portal-based OA system from Cybozu Japan. An attacker could use this vulnerability to trick users into performing unintended actions...

Cybozu Garoon Bulletin Information Disclosure Vulnerability

Cybozu Garoon is a portal-based OA office system of Cybozu Japan. An information disclosure vulnerability exists in Bulletin in Cybozu Garoon. An attacker can use this vulnerability to obtain the title of an announcement without viewing privileges...

Cybozu Garoon E-mail Incorrect Input Verification Vulnerability

Cybozu Garoon is a portal type OA office system of Cybozu Japan. A security vulnerability exists in e-mail in Cybozu Garoon. The vulnerability can be exploited by an attacker to alter e-mail data without proper privileges...

Cybozu Garoon Bulletin Cross-Site Scripting Vulnerability (CNVD-2021-59724)

A cross-site scripting vulnerability exists in Bulletin in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...

Cybozu Garoon Information Disclosure Vulnerability (CNVD-2021-59718)

Cybozu Garoon, a portal-based OA system of Cybozu Japan, is vulnerable to information disclosure. An attacker can use this vulnerability to obtain data from Comment and Space without viewing privileges...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2021-59722)

A cross-site scripting vulnerability exists in some functions of Cybozu Garoon's group email. An attacker can exploit this vulnerability to execute arbitrary scripts on the logged-in user's Web browser...

Cybozu Garoon E-mail Operation Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in e-mail in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change e-mail data without proper privileges...

Cybozu Garoon Message Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Message in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...

Cybozu Garoon Scheduler and MultiReport Operation Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to delete data from Scheduler and MultiReport without proper privileges...

Cybozu Garoon Full Text Search Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Full Text Search in Cybozu Garoon, a portal-based OA system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...

Cybozu Garoon Portal Operation Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in the Portal of Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change the data of the portal without proper privileges...

Cybozu Garoon User Profile Incorrect Input Validation Vulnerability

A security vulnerability exists in the User Profile of Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to change data in the user profile without proper privileges...

Cybozu Garoon View Restriction Bypass Vulnerability

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. A view restriction bypass vulnerability exists in the Portal in Cybozu Garoon. An attacker can use this vulnerability to obtain data from the portal without viewing privileges...

Cybozu Garoon E-mail Incorrect Input Validation Vulnerability (CNVD-2021-59731)

A security vulnerability exists in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker could use this vulnerability to change e-mail data without proper privileges...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2021-59719)

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. A cross-site scripting vulnerability exists in some of the email functions in Cybozu Garoon. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...

Cybozu Garoon Address View Restriction Bypass Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. Address in Cybozu Garoon has a view restriction bypass vulnerability, which can be exploited by attackers to log in to the product to obtain address data without viewing privileges...