CVE-2020-5586

Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...

CVE-2020-5585

Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...

CVE-2020-5585

CVE-2020-5585 affects Cybozu Garoon 5.0.0–5.0.1. It is a Cross-Site Scripting vulnerability that can be exploited by an attacker with administrator rights to inject arbitrary scripts into the browser, via unspecified vectors. In the consolidated disclosures, CyVDB enumerates related entries for G...

CVE-2020-5586

Cybozu Garoon versions 4.10.3 through 5.0.1 contain a cross-site scripting vulnerability that can be exploited by an attacker with administrator rights to inject arbitrary scripts via unspecified vectors. Documented impact indicates that an arbitrary script could be executed in the browser of an ...

CVE-2020-5583

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors...

CVE-2020-5584

Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors...

CVE-2020-5584

CVE-2020-5584 affects Cybozu Garoon 4.0.0 through 5.0.1. The published sources describe a token-related information leakage that allows remote attackers to obtain unintended information via unspecified vectors. Related entries (CyVDB/Red Hat/JVN/CNVD) confirm multiple vulnerabilities in Cybozu Ga...

CVE-2020-5583

CVE-2020-5583 affects Cybozu Garoon 4.0.0 to 5.0.1. The vulnerability allows remote authenticated attackers to bypass access restrictions and obtain unauthorized Multi-Report data via unspecified vectors, effectively bypassing view privileges for that data. Impact is limited to exposure of Multi-...

CVE-2020-5582

CVE-2020-5582 affects Cybozu Garoon 4.0.0–5.0.1. The vulnerability allows remote authenticated attackers to bypass access restrictions and alter data for files attached to Reports via unspecified vectors (privilege bypass on attachments). Documented impact includes unauthorized modification of re...

CVE-2020-5581

Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended information via unspecified vectors...

CVE-2020-5582

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors...

CVE-2020-5581

CVE-2020-5581 is a path-traversal vulnerability in Cybozu Garoon 4.0.0–5.0.1 that allows remote authenticated attackers to obtain unintended information via unspecified vectors. The vulnerability affects Cybozu Garoon’s portal-related components and could lead to information disclosure as summari...

CVE-2020-5580

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Single sign-on settings via unspecified vectors...

CVE-2020-5580

Affected software: Cybozu Garoon 4.0.0–5.0.1. Issue: CVE-2020-5580 allows remote authenticated attackers to bypass access restrictions to view and/or alter Single sign-on (SSO) settings via unspecified vectors. Root cause: bypass of SSO access controls leading to privilege escalation in SSO confi...

Cybozu Garoon path traversal vulnerability (CNVD-2020-36769)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A path traversal vulnerability exists in Cybozu Garoon versions 5.0.0 through 5.0.1. An attacker can exploit this...

Cybozu Garoon Bypass Attachment Operation Privilege Vulnerability

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A security vulnerability exists in Cybozu Garoon versions 4.0.0 through 5.0.1. A remote attacker can exploit the...

JVN#55497111: Multiple vulnerabilities in Cybozu Garoon

Cybozu, Inc. has released security updates for Cybozu Garoon. CyVDB-2083 Vulnerability in Single sign-on settings to avoid viewing and operation privileges - CVE-2020-5580 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N| Base Score: 8.5 CVSS v2|...

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2020-36772)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A cross-site scripting vulnerability exists in Cybozu Garoon versions 5.0.0 through 5.0.1. An attacker can exploi...

Cybozu Garoon path traversal vulnerability (CNVD-2020-36776)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A path traversal vulnerability exists in Cybozu Garoon versions 4.0.0 through 5.0.1. A remote attacker can exploi...

Cybozu Garoon Information Disclosure Vulnerability (CNVD-2020-36770)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A security vulnerability exists in Cybozu Garoon versions 4.0.0 through 5.0.1. A remote attacker can exploit the...