Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CybozuGaroon3.7

23 matches found

CVE
CVE•added 2013/12/05 12:55 p.m.•48 views

CVE-2013-6912

Cross-site scripting (XSS) vulnerability in a calendar component in Cybozu Garoon before 3.7.2, when Internet Explorer 6 through 9 is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.3AI score0.00232EPSS
CVE
CVE•added 2014/02/27 1:55 a.m.•48 views

CVE-2014-0817

Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 does not properly manage sessions, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors.

4.9CVSS6.5AI score0.00218EPSS
CVE
CVE•added 2014/05/02 10:55 a.m.•45 views

CVE-2014-1988

The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.

3.5CVSS6.3AI score0.00426EPSS
CVE
CVE•added 2014/07/20 11:12 a.m.•45 views

CVE-2014-1995

Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.4AI score0.00209EPSS
CVE
CVE•added 2014/07/20 11:12 a.m.•43 views

CVE-2014-1994

Cross-site scripting (XSS) vulnerability in the Notices portlet in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.3AI score0.00209EPSS
CVE
CVE•added 2017/07/07 1:29 p.m.•43 views

CVE-2017-2144

Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page.

5.8CVSS5.3AI score0.00287EPSS
CVE
CVE•added 2013/12/05 12:55 p.m.•42 views

CVE-2013-6914

Cross-site scripting (XSS) vulnerability in a calendar component in Cybozu Garoon before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.3AI score0.00201EPSS
CVE
CVE•added 2014/07/20 11:12 a.m.•42 views

CVE-2014-1987

The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors.

10CVSS7.8AI score0.04395EPSS
CVE
CVE•added 2014/07/20 11:12 a.m.•42 views

CVE-2014-1996

Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call.

7.5CVSS7.8AI score0.00752EPSS
CVE
CVE•added 2013/12/05 12:55 p.m.•41 views

CVE-2013-6004

Session fixation vulnerability in Cybozu Garoon before 3.7.2 allows remote attackers to hijack web sessions via unspecified vectors.

6.8CVSS6.8AI score0.00505EPSS
CVE
CVE•added 2013/12/28 4:53 a.m.•41 views

CVE-2013-6929

SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted API input.

6.5CVSS8AI score0.00522EPSS
CVE
CVE•added 2014/07/20 11:12 a.m.•41 views

CVE-2014-1992

Cross-site scripting (XSS) vulnerability in the Messages functionality in Cybozu Garoon 3.1.x, 3.5.x, and 3.7.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.3AI score0.00209EPSS
CVE
CVE•added 2017/07/07 1:29 p.m.•41 views

CVE-2017-2146

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu.

4.8CVSS5.1AI score0.002EPSS
CVE
CVE•added 2014/07/20 11:12 a.m.•39 views

CVE-2014-1993

The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors.

4CVSS6.3AI score0.00207EPSS
CVE
CVE•added 2013/12/05 12:55 p.m.•38 views

CVE-2013-6911

Cross-site scripting (XSS) vulnerability in the bulletin-board component in Cybozu Garoon before 3.7.2, when Internet Explorer or Firefox is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.3AI score0.00232EPSS
CVE
CVE•added 2015/10/08 8:59 p.m.•38 views

CVE-2015-5649

Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain group-administration privil...

7CVSS7AI score0.00161EPSS
CVE
CVE•added 2013/12/28 4:53 a.m.•37 views

CVE-2013-6006

Cybozu Garoon 3.5 through 3.7 SP2 allows remote attackers to bypass Keitai authentication via a modified user ID in a request.

5.8CVSS7AI score0.00127EPSS
CVE
CVE•added 2014/02/27 1:55 a.m.•36 views

CVE-2014-0820

Directory traversal vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to read arbitrary files via unspecified vectors.

4CVSS6.4AI score0.00244EPSS
CVE
CVE•added 2014/02/27 1:55 a.m.•36 views

CVE-2014-0821

SQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6930 and CVE-2013-6931.

6.5CVSS8AI score0.0039EPSS
CVE
CVE•added 2013/12/05 12:55 p.m.•35 views

CVE-2013-6916

Cross-site scripting (XSS) vulnerability in the Yahoo! User Interface Library in Cybozu Garoon before 3.7.2, when Internet Explorer 9 or 10 or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.7AI score0.0026EPSS
CVE
CVE•added 2014/05/02 10:55 a.m.•34 views

CVE-2014-1989

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls.

6CVSS6.2AI score0.00216EPSS
CVE
CVE•added 2013/12/05 12:55 p.m.•33 views

CVE-2013-6913

Cross-site scripting (XSS) vulnerability in a search component in Cybozu Garoon before 3.7.2, when Internet Explorer is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.3AI score0.00232EPSS
CVE
CVE•added 2013/12/05 12:55 p.m.•31 views

CVE-2013-6915

Cross-site scripting (XSS) vulnerability in the system-administration component in Cybozu Garoon before 3.7.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.3AI score0.00201EPSS