CVSS: 4.3EPSS: 0%CPEs: 25EXPL: 0CVE-2016-1196
https://notcve.org/view.php?id=CVE-2016-1196
Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a different vulnerability than CVE-2015-7776. Cybozu Garoon 3.x y 4.x en versiones anteriores a 4.2.1 permite a usuarios remotos autenticados eludir restricciones destinadas al acceso y obtener información sensible de Address Book a través de una llamada API, una vulnerabilidad diferente a CVE-2015-7776. • http://jvn.jp/en/jp/JVN33879831/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2016-000082 https://support.cybozu.com/ja-jp/article/8970 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.1EPSS: 0%CPEs: 5EXPL: 0CVE-2016-1197
https://notcve.org/view.php?id=CVE-2016-1197
Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775. Vulnerabilidad de XSS en Cybozu Garoon 4.x en versiones anteriores a 4.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML manipulados a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-7775. • http://jvn.jp/en/jp/JVN37121456/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2016-000083 https://support.cybozu.com/ja-jp/article/9303 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.4EPSS: 0%CPEs: 25EXPL: 0CVE-2016-1195
https://notcve.org/view.php?id=CVE-2016-1195
Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. Vulnerabilidad de redirección abierta en Cybozu Garoon 3.x y 4.x en versiones anteriores a 4.2.1 permite a atacantes remotos redirigir usuarios a sitios web arbitrarios y llevar a cabo ataques de phishing a través de una URL manipulada. • http://jvn.jp/en/jp/JVN32218514/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2016-000081 https://support.cybozu.com/ja-jp/article/8987 •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2015-7775
https://notcve.org/view.php?id=CVE-2015-7775
Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-1197. Vulnerabilidad de XSS en Cybozu Garoon 4.0.3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-1197. • http://jvn.jp/en/jp/JVN49285177/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2016-000084 https://support.cybozu.com/ja-jp/article/8893 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.5EPSS: 0%CPEs: 24EXPL: 0CVE-2015-5646
https://notcve.org/view.php?id=CVE-2015-5646
Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-863 and CyVDB-867. Cybozu Garoon 3.x hasta la versión 3.7.5 y 4.x hasta la versión 4.0.3 permite a usuarios remotos autenticados ejecutar código PHP arbitrario a través de vectores no especificados, también conocido como CyVDB-863 y CyVDB-867. • http://jvn.jp/en/jp/JVN21025396/374951/index.html http://jvn.jp/en/jp/JVN21025396/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2015-000151 https://support.cybozu.com/ja-jp/article/8809 https://support.cybozu.com/ja-jp/article/8811 • CWE-94: Improper Control of Generation of Code ('Code Injection') •