PT-2013-6182

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.2 Description A cross-site scripting XSS issue exists in the calendar component of Cybozu Garoon, allowing remote authenticated users to inject arbitrary web script or HTML via unspecified vectors when using...

CVE-2013-6912: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a calendar component in Cybozu Garoon before 3.7.2, when Internet Explorer 6 through 9 is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6903: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6004: Undefined Security Weakness

Session fixation vulnerability in Cybozu Garoon before 3.7.2 allows remote attackers to hijack web sessions via unspecified vectors...

PT-2013-5915

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.2 Description A session fixation issue allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations For versions prior to 3.7.2, update to version...

PT-2013-6183

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.2 Description A cross-site scripting XSS issue exists in the search component of Cybozu Garoon, allowing remote authenticated users to inject arbitrary web script or HTML via unspecified vectors when Interne...

CVE-2013-6904: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a note component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-6184

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.2 Description A cross-site scripting XSS issue exists in the calendar component, allowing remote authenticated users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors...

PT-2013-6186

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors when using Internet Explorer 9 or 10 or Chrome. Recommendations...

PT-2013-6177

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 2.x through 3.x before 3.7.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on behalf of the use...

PT-2013-6178

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system...

PT-2013-6172

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the Space function, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations Fo...

CVE-2013-6907: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a mail component in Cybozu Garoon 2.x and 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6905: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a phone component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6901: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a search component in Cybozu Garoon before 3.7.2, when Internet Explorer is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6910: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ajax components in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-6179

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the report component, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations...

PT-2013-6176

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the mail component of Cybozu Garoon, specifically when used with Internet Explorer 6 through 8. This allows remote attackers to inject arbitrary web...

PT-2013-5912

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7 SP1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 3.7 SP1, update to version 3.7 SP1 or later to resolve the issue...