Vulnerabilities > Cybozu > Garoon

DATE CVE VULNERABILITY TITLE RISK
2016-06-19 CVE-2016-1197 Cross-site Scripting vulnerability in Cybozu Garoon
Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775.
network
low complexity
cybozu CWE-79
6.1
2016-06-19 CVE-2016-1195 Unspecified vulnerability in Cybozu Garoon
Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
network
low complexity
cybozu
7.4
2016-06-19 CVE-2015-7775 Cross-site Scripting vulnerability in Cybozu Garoon 4.0.3
Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-1197.
network
low complexity
cybozu CWE-79
5.4