PT-2013-6184

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.2 Description A cross-site scripting XSS issue exists in the calendar component, allowing remote authenticated users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors...

PT-2013-6186

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors when using Internet Explorer 9 or 10 or Chrome. Recommendations...

PT-2013-6177

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 2.x through 3.x before 3.7.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on behalf of the use...

PT-2013-6178

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system...

PT-2013-6172

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the Space function, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations Fo...

CVE-2013-6907: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a mail component in Cybozu Garoon 2.x and 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6905: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a phone component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6901: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in a search component in Cybozu Garoon before 3.7.2, when Internet Explorer is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6910: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ajax components in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-6179

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the report component, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations...

PT-2013-6176

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the mail component of Cybozu Garoon, specifically when used with Internet Explorer 6 through 8. This allows remote attackers to inject arbitrary web...

PT-2013-5912

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7 SP1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 3.7 SP1, update to version 3.7 SP1 or later to resolve the issue...

CVE-2013-6902: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Space function in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-6185

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.2 Description The issue is related to a cross-site scripting XSS vulnerability in the system-administration component. This allows remote authenticated users to inject arbitrary web script or HTML via...

PT-2013-5913

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7 SP1 Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, via unspecified vectors. Recommendations For versions prior to 3.7 SP1, update to version 3.7 SP1...

CVE-2013-6900: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the system-administration component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-5914

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.1 through 3.5 SP5 Description The issue is related to a CRLF injection vulnerability. When Phone Messages forwarding is enabled, remote authenticated users can inject arbitrary e-mail headers via unspecified vectors...

PT-2013-6171

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the Space function of Cybozu Garoon, specifically when used with Firefox, allowing remote attackers to inject arbitrary web script or HTML...

PT-2013-6173

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 3.7.0 Description A cross-site scripting XSS issue exists in the schedule component of Cybozu Garoon, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors when using Internet...