Cybozu Garoon 4.2.0

CPE Details

Cybozu Garoon 4.2.0
4.2.0
2016-08-23
16h18 +00:00
2016-08-23
16h18 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:cybozu:garoon:4.2.0:*:*:*:*:*:*:*

Informations

Vendor

cybozu

Product

garoon

Version

4.2.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-31472 2022-07-10 22h40 +00:00 Browse restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to obtain the data of Cabinet.
4.3
Moyen
CVE-2022-30943 2022-07-10 22h40 +00:00 Browsing restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data of Bulletin.
4.3
Moyen
CVE-2022-30602 2022-07-10 22h40 +00:00 Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to alter the file information and/or delete the files.
8.1
Haute
CVE-2022-29512 2022-07-10 22h40 +00:00 Exposure of sensitive information to an unauthorized actor issue in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to obtain the data without the viewing privilege.
6.5
Moyen
CVE-2022-29892 2022-07-04 04h56 +00:00 Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to repeatedly display errors in certain functions and cause a denial-of-service (DoS).
6.5
Moyen
CVE-2022-29484 2022-07-04 04h56 +00:00 Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a remote authenticated attacker to delete the data of Space.
8.1
Haute
CVE-2022-29467 2022-07-04 04h56 +00:00 Address information disclosure vulnerability in Cybozu Garoon 4.2.0 to 5.5.1 allows a remote authenticated attacker to obtain some data of Address.
4.3
Moyen
CVE-2022-28718 2022-07-04 04h56 +00:00 Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a remote authenticated attacker to alter the data of Bulletin.
4.3
Moyen
CVE-2022-28692 2022-07-04 04h56 +00:00 Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Scheduler.
4.3
Moyen
CVE-2022-27807 2022-07-04 04h56 +00:00 Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to disable to add Categories.
4.3
Moyen
CVE-2022-27803 2022-07-04 04h55 +00:00 Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space.
4.3
Moyen
CVE-2022-27661 2022-07-04 04h55 +00:00 Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Workflow.
4.3
Moyen
CVE-2022-26368 2022-07-04 04h55 +00:00 Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter and/or obtain the data of Cabinet.
5.4
Moyen
CVE-2022-26054 2022-07-04 04h55 +00:00 Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Link.
4.3
Moyen
CVE-2022-26051 2022-07-04 04h55 +00:00 Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Portal.
4.3
Moyen
CVE-2021-20774 2021-08-18 03h36 +00:00 Cross-site scripting vulnerability in some functions of E-mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
5.4
Moyen
CVE-2021-20773 2021-08-18 03h36 +00:00 There is a vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.0, which may allow a remote authenticated attacker to delete the route information Workflow without the appropriate privilege.
4.3
Moyen
CVE-2021-20771 2021-08-18 03h36 +00:00 Cross-site scripting vulnerability in some functions of E-Mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote attacker to inject an arbitrary script via unspecified vectors.
6.1
Moyen
CVE-2021-20768 2021-08-18 03h36 +00:00 Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to delete the data of Scheduler and MultiReport without the appropriate privilege.
4.3
Moyen
CVE-2021-20767 2021-08-18 03h36 +00:00 Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
5.4
Moyen
CVE-2021-20766 2021-08-18 03h36 +00:00 Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors.
6.1
Moyen
CVE-2021-20765 2021-08-18 03h36 +00:00 Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors.
6.1
Moyen
CVE-2021-20764 2021-08-18 03h36 +00:00 Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Attaching Files.
5.3
Moyen
CVE-2021-20763 2021-08-18 03h36 +00:00 Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the appropriate privilege.
4.3
Moyen
CVE-2021-20762 2021-08-18 03h36 +00:00 Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated to alter the data of E-mail without the appropriate privilege.
4.3
Moyen
CVE-2021-20761 2021-08-18 03h36 +00:00 Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker with an administrative privilege to alter the data of E-mail without the appropriate privilege.
2.7
Bas
CVE-2021-20760 2021-08-18 03h36 +00:00 Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of User Profile without the appropriate privilege.
4.3
Moyen
CVE-2021-20758 2021-08-18 03h35 +00:00 Cross-site request forgery (CSRF) vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to hijack the authentication of administrators and perform an arbitrary operation via unspecified vectors.
8
Haute
CVE-2021-20757 2021-08-18 03h35 +00:00 Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege.
4.3
Moyen
CVE-2021-20756 2021-08-18 03h35 +00:00 Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Address without the viewing privilege.
4.3
Moyen
CVE-2021-20755 2021-08-18 03h35 +00:00 Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the viewing privilege.
4.3
Moyen
CVE-2021-20754 2021-08-18 03h35 +00:00 Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Workflow without the appropriate privilege.
4.3
Moyen
CVE-2021-20753 2021-08-18 03h35 +00:00 Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
5.4
Moyen
CVE-2020-5587 2020-06-30 08h20 +00:00 Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vectors.
6.5
Moyen
CVE-2020-5583 2020-06-30 08h20 +00:00 Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors.
6.5
Moyen
CVE-2020-5584 2020-06-30 08h20 +00:00 Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors.
7.5
Haute
CVE-2020-5581 2020-06-30 08h20 +00:00 Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended information via unspecified vectors.
6.5
Moyen
CVE-2020-5582 2020-06-30 08h20 +00:00 Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors.
4.3
Moyen
CVE-2020-5580 2020-06-30 08h20 +00:00 Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Single sign-on settings via unspecified vectors.
8.1
Haute
CVE-2020-5566 2020-04-28 01h15 +00:00 Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and 'Messages'.
4.3
Moyen
CVE-2020-5567 2020-04-28 01h15 +00:00 Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in Application Menu.
7.5
Haute
CVE-2020-5564 2020-04-28 01h15 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application 'E-mail'.
6.1
Moyen
CVE-2020-5565 2020-04-28 01h15 +00:00 Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's data via the applications 'Workflow' and 'MultiReport'.
4.3
Moyen
CVE-2020-5563 2020-04-28 01h15 +00:00 Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the affected product via the API.
5.3
Moyen
CVE-2019-5976 2019-09-12 13h58 +00:00 Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via unspecified vectors.
4.9
Moyen
CVE-2019-5977 2019-09-12 13h58 +00:00 Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'.
4.3
Moyen
CVE-2019-5978 2019-09-12 13h58 +00:00 Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the application 'Scheduler'.
6.1
Moyen
CVE-2019-5991 2019-09-12 13h58 +00:00 SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
7.6
Haute
CVE-2019-5933 2019-05-17 13h25 +00:00 Cybozu Garoon 4.0.0 to 4.10.0 allows remote authenticated attackers to bypass access restriction to view the Bulletin Board without view privileges via the application 'Bulletin'.
4.3
Moyen
CVE-2019-5934 2019-05-17 13h25 +00:00 SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application 'logging'.
7.2
Haute
CVE-2019-5935 2019-05-17 13h25 +00:00 Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information.
4.3
Moyen
CVE-2019-5936 2019-05-17 13h25 +00:00 Directory traversal vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to obtain files without access privileges via the application 'Work Flow'.
5.4
Moyen
CVE-2019-5937 2019-05-17 13h25 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the user information.
5.4
Moyen
CVE-2019-5938 2019-05-17 13h25 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'.
6.1
Moyen
CVE-2019-5939 2019-05-17 13h25 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'.
6.1
Moyen
CVE-2019-5940 2019-05-17 13h25 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Scheduler'.
6.1
Moyen
CVE-2019-5941 2019-05-17 13h25 +00:00 Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges via the application 'Multi Report'.
4.3
Moyen
CVE-2019-5942 2019-05-17 13h25 +00:00 Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges via the Multiple Files Download function of application 'Cabinet'.
4.3
Moyen
CVE-2019-5943 2019-05-17 13h25 +00:00 Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to view the information without view privileges via the application 'Bulletin' and the application 'Cabinet'.
4.3
Moyen
CVE-2019-5944 2019-05-17 13h25 +00:00 Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the contents of application 'Address' without modify privileges via the application 'Address'.
4.3
Moyen
CVE-2019-5928 2019-05-17 13h25 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Customize Item function.
6.1
Moyen
CVE-2019-5929 2019-05-17 13h25 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the application 'Memo'.
6.1
Moyen
CVE-2019-5930 2019-05-17 13h25 +00:00 Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System'.
4.3
Moyen
CVE-2019-5931 2019-05-17 13h25 +00:00 Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified vectors.
8.7
Haute
CVE-2018-16178 2019-01-09 21h00 +00:00 Cybozu Garoon 3.0.0 to 4.10.0 allows remote attackers to bypass access restriction to view information available only for a sign-on user via Single sign-on function.
7.5
Haute
CVE-2018-0673 2018-11-15 14h00 +00:00 Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors.
8.1
Haute
CVE-2018-0607 2018-07-26 15h00 +00:00 SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
8.8
Haute
CVE-2018-0530 2018-04-16 11h00 +00:00 SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
8.8
Haute
CVE-2018-0531 2018-04-16 11h00 +00:00 Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a folder and/or notification settings via unspecified vectors.
4.3
Moyen
CVE-2018-0532 2018-04-16 11h00 +00:00 Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors.
2.7
Bas
CVE-2018-0533 2018-04-16 11h00 +00:00 Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified vectors.
4.9
Moyen
CVE-2018-0548 2018-04-16 11h00 +00:00 Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unspecified vectors.
4.3
Moyen
CVE-2018-0549 2018-04-16 11h00 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
5.4
Moyen
CVE-2018-0550 2018-04-16 11h00 +00:00 Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors.
4.3
Moyen
CVE-2018-0551 2018-04-16 11h00 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
5.4
Moyen
CVE-2017-2254 2017-08-28 18h00 +00:00 Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input
4.9
Moyen
CVE-2017-2255 2017-08-28 18h00 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space".
5.4
Moyen
CVE-2017-2256 2017-08-28 18h00 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo".
5.4
Moyen
CVE-2017-2257 2017-08-28 18h00 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function.
6.1
Moyen
CVE-2017-2144 2017-07-07 11h00 +00:00 Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page.
5.4
Moyen
CVE-2017-2145 2017-07-07 11h00 +00:00 Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors.
5.4
Moyen
CVE-2017-2146 2017-07-07 11h00 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu.
4.8
Moyen
CVE-2016-4906 2017-06-09 14h00 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai.
6.1
Moyen
CVE-2016-4907 2017-06-09 14h00 +00:00 Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors.
8.8
Haute
CVE-2016-4908 2017-06-09 14h00 +00:00 Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unspecified vectors.
4.3
Moyen
CVE-2016-4909 2017-06-09 14h00 +00:00 Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the authentication of a logged in user to force a logout via unspecified vectors.
4.3
Moyen
CVE-2016-4910 2017-06-09 14h00 +00:00 Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operational administrators' MultiReport filters via unspecified vectors.
4.3
Moyen
CVE-2016-7801 2017-06-09 14h00 +00:00 Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors.
4.3
Moyen
CVE-2016-7802 2017-06-09 14h00 +00:00 Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors.
6.5
Moyen
CVE-2016-7803 2017-06-09 14h00 +00:00 SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiReport" function.
8.8
Haute
CVE-2017-2091 2017-04-28 14h00 +00:00 Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors.
4.3
Moyen
CVE-2017-2092 2017-04-28 14h00 +00:00 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
5.4
Moyen
CVE-2017-2093 2017-04-28 14h00 +00:00 Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors.
4.3
Moyen
CVE-2017-2094 2017-04-28 14h00 +00:00 Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors.
4.3
Moyen
CVE-2017-2095 2017-04-28 14h00 +00:00 Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors.
4.3
Moyen
CVE-2016-1194 2017-04-21 12h00 +00:00 Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service.
6.5
Moyen
CVE-2016-1213 2017-04-20 16h00 +00:00 The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites.
6.1
Moyen
CVE-2016-1214 2017-04-20 16h00 +00:00 Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2.
6.1
Moyen
CVE-2016-1215 2017-04-20 16h00 +00:00 Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2.
6.1
Moyen
CVE-2016-1216 2017-04-20 16h00 +00:00 Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2.
6.1
Moyen
CVE-2016-1217 2017-04-20 16h00 +00:00 Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2.
6.1
Moyen
CVE-2016-1218 2017-04-20 16h00 +00:00 SQL injection vulnerability in Cybozu Garoon before 4.2.2.
8.8
Haute
CVE-2016-1220 2017-04-20 16h00 +00:00 Cybozu Garoon before 4.2.2 does not properly restrict access.
4.3
Moyen
CVE-2016-1219 2017-04-20 15h00 +00:00 Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use.
9.8
Critique
CVE-2016-1188 2016-06-25 19h00 +00:00 Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors.
6.5
Moyen
CVE-2016-1189 2016-06-25 19h00 +00:00 Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying a portlet via unspecified vectors.
8.1
Haute
CVE-2016-1190 2016-06-25 19h00 +00:00 Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors.
6.5
Moyen
CVE-2016-1193 2016-06-25 19h00 +00:00 Cybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading information via unspecified vectors.
7.5
Haute
CVE-2016-1191 2016-06-19 18h00 +00:00 Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors.
5.3
Moyen
CVE-2016-1192 2016-06-19 18h00 +00:00 Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors.
4.3
Moyen
CVE-2016-1196 2016-06-19 18h00 +00:00 Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a different vulnerability than CVE-2015-7776.
4.3
Moyen
CVE-2016-1195 2016-06-19 13h00 +00:00 Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
7.4
Haute
CVE-2016-1197 2016-06-19 13h00 +00:00 Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775.
6.1
Moyen