1514 matches found
Authentication flaw
Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Single sign-on settings via unspecified vectors...
Design/Logic Flaw
Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors...
Cross site scripting
Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...
Cross site scripting
Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...
Design/Logic Flaw
Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors...
Path traversal
Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to obtain unintended information via unspecified vectors...
Authentication flaw
Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors...
CVE-2020-5587
Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vectors...
CVE-2020-5588
CVE-2020-5588 affects Cybozu Garoon 5.0.0–5.0.1 and is a path traversal vulnerability that allows an attacker with administrator rights to obtain unintended information via unspecified vectors. Connected sources (CyVDB/NVD/Red Hat/JVN/CVEs) describe multiple related vulnerabilities in Cybozu Garo...
CVE-2020-5587
Summary: CVE-2020-5587 affects Cybozu Garoon 4.0.0–5.0.1, with information disclosure possible to remote authenticated attackers via unspecified vectors. The impact is exposure of unintended information. Affected products/versions (as provided): Cybozu Garoon 4.0.0 to 5.0.1. Root cause / vectors:...
CVE-2020-5588
Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to obtain unintended information via unspecified vectors...
CVE-2020-5586
Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...
CVE-2020-5585
Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...
CVE-2020-5585
CVE-2020-5585 affects Cybozu Garoon 5.0.0–5.0.1. It is a Cross-Site Scripting vulnerability that can be exploited by an attacker with administrator rights to inject arbitrary scripts into the browser, via unspecified vectors. In the consolidated disclosures, CyVDB enumerates related entries for G...
CVE-2020-5586
Cybozu Garoon versions 4.10.3 through 5.0.1 contain a cross-site scripting vulnerability that can be exploited by an attacker with administrator rights to inject arbitrary scripts via unspecified vectors. Documented impact indicates that an arbitrary script could be executed in the browser of an ...
CVE-2020-5584
Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors...
CVE-2020-5584
CVE-2020-5584 affects Cybozu Garoon 4.0.0 through 5.0.1. The published sources describe a token-related information leakage that allows remote attackers to obtain unintended information via unspecified vectors. Related entries (CyVDB/Red Hat/JVN/CNVD) confirm multiple vulnerabilities in Cybozu Ga...
CVE-2020-5582
CVE-2020-5582 affects Cybozu Garoon 4.0.0–5.0.1. The vulnerability allows remote authenticated attackers to bypass access restrictions and alter data for files attached to Reports via unspecified vectors (privilege bypass on attachments). Documented impact includes unauthorized modification of re...