Vulnerabilities > Cybozu > Garoon > 2.0

DATE CVE VULNERABILITY TITLE RISK
2013-12-05 CVE-2013-6004 Permissions, Privileges, and Access Controls vulnerability in Cybozu Garoon
Session fixation vulnerability in Cybozu Garoon before 3.7.2 allows remote attackers to hijack web sessions via unspecified vectors.
network
cybozu CWE-264
6.8
2013-12-05 CVE-2013-6002 Resource Management Errors vulnerability in Cybozu Garoon
The server in Cybozu Garoon before 3.7 SP1 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
network
low complexity
cybozu CWE-399
5.0
2013-12-05 CVE-2013-6001 SQL Injection vulnerability in Cybozu Garoon
SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
network
low complexity
cybozu CWE-89
6.5