PT-2017-8601

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.2 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the Messages function of Cybozu Garoon Keitai. Recommendations For versions 3.0.0 through...

CVE-2016-4910: Improper Access Control

Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operational administrators' MultiReport filters via unspecified vectors...

CVE-2016-7801: Improper Access Control

Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors...

PT-2017-9354

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.2 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands via the "MultiReport" function. This can potentially lead to unauthorized data access or modification...

CVE-2016-7802: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors...

PT-2017-8604

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of a logged-in user, forcing a logout via unspecified vectors. Recommendations For Cybozu Garoo...

Cybozu Garoon < 4.2.2 Multiple Vulnerabilities

Cybozu Garoon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon"; ifdescription...

Cybozu Garoon Multiple Vulnerabilities (Aug 2016)

Cybozu Garoon is prone to multiple vulnerabilities. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2017-2092

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

Authentication flaw

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2093

Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors...

Authentication flaw

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors...

CVE-2017-2091

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors...

CVE-2017-2093

Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors...

CVE-2017-2094

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors...

CVE-2017-2092

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2095

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors...

CVE-2017-2091

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors...

CVE-2017-2095

CVE-2017-2095 affects Cybozu Garoon 3.0.0 to 4.2.3. A remote authenticated attacker can bypass access restrictions in the mail function, resulting in alteration of the order of mail folders. The root cause is an access restriction flaw in the mail handling logic. remediation per the documents is ...