CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2019-5939
https://notcve.org/view.php?id=CVE-2019-5939
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'. La vulnerabilidad del tipo Cross-site scripting en Cybozu Garoon 4.0.0 a 4.10.1 permite a los atacantes remotos inyectar scripts web o HTML a través de la aplicación 'Portal'. • http://jvn.jp/en/jp/JVN58849431/index.html https://kb.cybozu.support/article/35495 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2019-5930
https://notcve.org/view.php?id=CVE-2019-5930
Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System'. Cybozu Garoon 4.0.0 a 4.6.3 permite a los atacantes remotos eludir el Access Restriction para navegar por páginas no autorizadas a través de la aplicación 'Management of Basic System'. • http://jvn.jp/en/jp/JVN58849431/index.html https://kb.cybozu.support/article/34227 •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-5932
https://notcve.org/view.php?id=CVE-2019-5932
Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Portal'. La vulnerabilidad del tipo Cross-site scripting en Cybozu Garoon 4.6.0 a 4.6.3 permite a los atacantes autentificados remotamente inyectar script web o HTML a través de la aplicación 'Portal'. • http://jvn.jp/en/jp/JVN58849431/index.html https://kb.cybozu.support/article/34276 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.7EPSS: 0%CPEs: 1EXPL: 0CVE-2019-5931
https://notcve.org/view.php?id=CVE-2019-5931
Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified vectors. Cybozu Garoon 4.0.0 a 4.6.3 permite a los atacantes autenticados alterar la información con privilegios invocando el Installer por medio de vectores no especificados. • http://jvn.jp/en/jp/JVN58849431/index.html https://kb.cybozu.support/article/34283 • CWE-20: Improper Input Validation •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2019-5929
https://notcve.org/view.php?id=CVE-2019-5929
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the application 'Memo'. La vulnerabilidad del tipo Cross-Site Scripting en Cybozu Garoon 4.0.0 a 4.6.3 permite a los atacantes remotos inyectar scripts web o HTML a través de la aplicación 'Memo'. • http://jvn.jp/en/jp/JVN58849431/index.html https://kb.cybozu.support/article/34277 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •