Cybozu: Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2.
CVSS Score
6.1
EPSS Score
0.012
Published
2017-04-20
Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2.
CVSS Score
6.1
EPSS Score
0.011
Published
2017-04-20
Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2.
CVSS Score
6.1
EPSS Score
0.011
Published
2017-04-20
Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2.
CVSS Score
6.1
EPSS Score
0.011
Published
2017-04-20
SQL injection vulnerability in Cybozu Garoon before 4.2.2.
CVSS Score
8.8
EPSS Score
0.015
Published
2017-04-20
Cybozu Garoon before 4.2.2 does not properly restrict access.
CVSS Score
4.3
EPSS Score
0.01
Published
2017-04-20
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.
CVSS Score
4.3
EPSS Score
0.016
Published
2017-04-20
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.
CVSS Score
6.5
EPSS Score
0.019
Published
2017-04-20
Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.
CVSS Score
4.3
EPSS Score
0.015
Published
2017-04-20
Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use.
CVSS Score
9.8
EPSS Score
0.033
Published
2017-04-20