Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
CybozuGaroon

26 matches found

CVE
CVE•added 2019/09/12 5:15 p.m.•123 views

CVE-2019-5991

SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

7.6CVSS7.6AI score0.00465EPSS
CVE
CVE•added 2019/09/12 5:15 p.m.•113 views

CVE-2019-5976

Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via unspecified vectors.

4.9CVSS5.3AI score0.00314EPSS
CVE
CVE•added 2019/09/12 5:15 p.m.•113 views

CVE-2019-5978

Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the application 'Scheduler'.

6.1CVSS6.2AI score0.00274EPSS
CVE
CVE•added 2019/09/12 5:15 p.m.•111 views

CVE-2019-5975

DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

5.4CVSS5AI score0.00195EPSS
CVE
CVE•added 2019/09/12 5:15 p.m.•104 views

CVE-2019-5977

Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'.

4.3CVSS4.8AI score0.00207EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•51 views

CVE-2019-5929

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the application 'Memo'.

6.1CVSS5.7AI score0.0026EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•47 views

CVE-2019-5937

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the user information.

5.4CVSS5AI score0.00195EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•45 views

CVE-2019-5943

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to view the information without view privileges via the application 'Bulletin' and the application 'Cabinet'.

4.3CVSS4.5AI score0.00153EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•45 views

CVE-2019-5946

Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen.

6.1CVSS5.9AI score0.00215EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•44 views

CVE-2019-5933

Cybozu Garoon 4.0.0 to 4.10.0 allows remote authenticated attackers to bypass access restriction to view the Bulletin Board without view privileges via the application 'Bulletin'.

4.3CVSS4.6AI score0.00153EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•41 views

CVE-2019-5942

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges via the Multiple Files Download function of application 'Cabinet'.

4.3CVSS4.7AI score0.00153EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•40 views

CVE-2019-5931

Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified vectors.

8.7CVSS6.2AI score0.00407EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•40 views

CVE-2019-5935

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information.

4.3CVSS4.6AI score0.00188EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•39 views

CVE-2019-5928

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Customize Item function.

6.1CVSS5.7AI score0.00278EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•39 views

CVE-2019-5945

Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authentication of Cybozu Garoon.

9.8CVSS7.1AI score0.00844EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•38 views

CVE-2019-5936

Directory traversal vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to obtain files without access privileges via the application 'Work Flow'.

5.5CVSS5AI score0.00088EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•38 views

CVE-2019-5939

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'.

6.1CVSS5.5AI score0.0026EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•37 views

CVE-2019-5932

Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Portal'.

4.8CVSS4.7AI score0.002EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•37 views

CVE-2019-5934

SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application 'logging'.

7.2CVSS6.6AI score0.00406EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•37 views

CVE-2019-5944

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the contents of application 'Address' without modify privileges via the application 'Address'.

4.3CVSS4.6AI score0.00188EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•36 views

CVE-2019-5938

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'.

6.1CVSS5.5AI score0.0026EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•36 views

CVE-2019-5941

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges via the application 'Multi Report'.

4.3CVSS4.6AI score0.00188EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•35 views

CVE-2019-5947

Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Cabinet'.

5.4CVSS4.8AI score0.00195EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•33 views

CVE-2019-5930

Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System'.

4.3CVSS5.1AI score0.00153EPSS
CVE
CVE•added 2019/05/17 4:29 p.m.•33 views

CVE-2019-5940

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Scheduler'.

6.1CVSS5.5AI score0.0026EPSS
CVE
CVE•added 2019/01/09 11:29 p.m.•32 views

CVE-2018-16178

Cybozu Garoon 3.0.0 to 4.10.0 allows remote attackers to bypass access restriction to view information available only for a sign-on user via Single sign-on function.

7.5CVSS7.4AI score0.0023EPSS