Garoon@4.6.3 Security Vulnerabilities and Issues — Garoon@4.6.3 CVE List

Lucene search

CybozuGaroon4.6.3

5 matches found

CVE•added 2019/05/17 4:29 p.m.•52 views

CVE-2019-5929

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the application 'Memo'.

6.1CVSS5.7AI score0.0026EPSS

CVE•added 2019/05/17 4:29 p.m.•41 views

CVE-2019-5931

Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified vectors.

8.7CVSS6.2AI score0.00386EPSS

CVE•added 2019/05/17 4:29 p.m.•40 views

CVE-2019-5928

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Customize Item function.

6.1CVSS5.7AI score0.00278EPSS

CVE•added 2019/05/17 4:29 p.m.•39 views

CVE-2019-5932

Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Portal'.

4.8CVSS4.7AI score0.002EPSS

CVE•added 2019/05/17 4:29 p.m.•34 views

CVE-2019-5930

Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System'.

4.3CVSS5.1AI score0.00153EPSS