4.2.0

DATE	CVE	VULNERABILITY TITLE	RISK
2016-06-19	CVE-2016-1191	Path Traversal vulnerability in Cybozu Garoon Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors. network low complexity cybozu CWE-22	5.0
2016-06-19	CVE-2016-1197	Cross-site Scripting vulnerability in Cybozu Garoon Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775. network cybozu CWE-79	4.3
2016-06-19	CVE-2016-1195	Open Redirection vulnerability in Cybozu Garoon Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. network cybozu	5.8