Cybozu Garoon Security Vulnerabilities and Issues — Cybozu Garoon CVE List

Lucene search

CybozuCybozu Garoon

8 matches found

CVE•added 2018/04/16 2:29 p.m.•47 views

CVE-2018-0532

Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors.

4CVSS4.5AI score0.00182EPSS

CVE•added 2018/04/16 2:29 p.m.•45 views

CVE-2018-0533

Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified vectors.

4.9CVSS5.6AI score0.01348EPSS

CVE•added 2018/04/16 2:29 p.m.•43 views

CVE-2018-0531

Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a folder and/or notification settings via unspecified vectors.

4.3CVSS5AI score0.00172EPSS

CVE•added 2018/04/16 2:29 p.m.•38 views

CVE-2018-0549

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

5.4CVSS5.5AI score0.00171EPSS

CVE•added 2018/04/16 2:29 p.m.•37 views

CVE-2018-0530

SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

8.8CVSS8.7AI score0.00644EPSS

CVE•added 2018/04/16 2:29 p.m.•36 views

CVE-2018-0551

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

5.4CVSS5.5AI score0.00171EPSS

CVE•added 2018/04/16 2:29 p.m.•35 views

CVE-2018-0548

Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unspecified vectors.

5CVSS5AI score0.00141EPSS

CVE•added 2018/04/16 2:29 p.m.•35 views

CVE-2018-0550

Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors.

4.3CVSS5AI score0.00135EPSS