CVE-2018-0530

SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-0549

CVE-2018-0549 is a stored cross-site scripting (CWE-79) vulnerability in Cybozu Garoon 3.0.0–4.6.0. The issue affects the Rich text feature in the Message component, allowing remote authenticated attackers to inject arbitrary web scripts/HTML via unspecified vectors, potentially affecting users w...

CVE-2018-0531

Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a folder and/or notification settings via unspecified vectors...

CVE-2018-0550

Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors...

CVE-2018-0532

CVE-2018-0532 affects Cybozu Garoon 3.0.0–4.2.6. Remote authenticated attackers could bypass login/access restrictions to alter data in the Standard database via unspecified vectors. Impact: unauthorized modification of setting data by a logged-in admin. Remediation per vendor: update to the late...

CVE-2018-0550

Cybozu Garoon vulnerability CVE-2018-0550 affects versions 3.5.0 to 4.6.1. An authenticated remote attacker can bypass access restrictions to view the closed title of the Cabinet (via unspecified vectors). The issue is documented under CVE-2018-0550 and is listed among multiple related vulnerabil...

CVE-2018-0532

Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors...

CVE-2018-0530

CVE-2018-0530 is a SQL injection vulnerability in Cybozu Garoon, affecting versions 3.5.0 through 4.2.6. It enables remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors in the application address component. The issue is documented across multiple sources (NVD, ...

CVE-2018-0551

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2018-08049)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...

Cybozu Garoon SQL Injection Vulnerability (CNVD-2018-08343)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A SQL injection vulnerability exists in Cybozu...

Cybozu Garoon Browsing Restriction Bypass Vulnerability (CNVD-2018-08809)

Cybozu Garoon is an office software with Chinese, Japanese, and English languages. A browsing restriction bypass vulnerability exists in the application "Cabinet" in Cybozu Garoon 3.5.0 through 4.6.1. The vulnerability can be exploited by users who can log in to the product to view folder names...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2018-08048)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting vulnerability exists in...

Cybozu Garoon Operation Limit Bypass Vulnerability

Cybozu Garoon is an office software with Chinese, Japanese, and English languages. An operation restriction bypass vulnerability exists in "Folder Settings" in Cybozu Garoon 3.0.0 through 4.2.6. The vulnerability can be exploited by a user with administrative privileges for one or more folders to...

Cybozu Garoon Operation Limit Bypass Vulnerability (CNVD-2018-08812)

Cybozu Garoon is an office software with Chinese, Japanese, and English languages. An operation restriction bypass vulnerability exists in the login authentication settings in Cybozu Garoon 3.0.0 through 4.2.6. The vulnerability can be exploited by users logging in to the product with...

Cybozu Garoon Operational Limit Bypass Vulnerability (CNVD-2018-08811)

Cybozu Garoon is an office software with Chinese, Japanese, and English languages. An operation restriction bypass vulnerability exists in the session authentication settings in Cybozu Garoon 3.0.0 through 4.2.6. The vulnerability can be exploited by users logging in to the product with...

Cybozu Garoon Browsing Restriction Bypass Vulnerability

Cybozu Garoon is an office software with Chinese, Japanese, and English languages. A browsing restriction bypass vulnerability exists in the application "Space" in Cybozu Garoon 4.0.0 through 4.6.0. The vulnerability can be exploited by users who can log in to the product to view the closed...

JVN#65268217: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. SQL injection in the application "Address" CWE-89 - CVE-2018-0530 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N| Base Score: 6.5 CVSS v2| AV:N/AC:L/Au:S/C:P/I:N/A:N|...

Cybozu Garoon 3.5.0 - 4.2.5 DoS Vulnerability

Cybozu Garoon is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon";...

Cybozu Garoon 3.7.0 - 4.2.5 'Rich text' Function XSS Vulnerability

Cybozu Garoon is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon...