Vulnerabilities > Cybozu > Garoon > 4.6.0

DATE CVE VULNERABILITY TITLE RISK
2018-04-16 CVE-2018-0550 Unspecified vulnerability in Cybozu Garoon
Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors.
network
low complexity
cybozu
4.3
2018-04-16 CVE-2018-0549 Cross-site Scripting vulnerability in Cybozu Garoon
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
cybozu CWE-79
5.4
2018-04-16 CVE-2018-0548 Unspecified vulnerability in Cybozu Garoon
Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unspecified vectors.
network
low complexity
cybozu
4.3