Lucene search
JpcertCVE-2013-6912HistoryDec 05, 2013 - 12:55 p.m.
CVE-2013-6912
2013-12-0512:55:37
CWE-79
jpcert
web.nvd.nist.gov
29
cve-2013-6912
xss
cybozu garoon
calendar
security vulnerability
internet explorer
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
48.3%
Cross-site scripting (XSS) vulnerability in a calendar component in Cybozu Garoon before 3.7.2, when Internet Explorer 6 through 9 is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
cybozugaroonRange≤3.7sp1
ORcybozugaroonMatch2.0sp1
ORcybozugaroonMatch2.0sp2
ORcybozugaroonMatch2.0sp3
ORcybozugaroonMatch2.0sp4
ORcybozugaroonMatch2.0sp5
ORcybozugaroonMatch2.0sp6
ORcybozugaroonMatch2.1
ORcybozugaroonMatch2.1sp1
ORcybozugaroonMatch2.1sp2
ORcybozugaroonMatch2.1sp3
ORcybozugaroonMatch2.5
ORcybozugaroonMatch2.5sp1
ORcybozugaroonMatch2.5sp2
ORcybozugaroonMatch2.5sp3
ORcybozugaroonMatch2.5sp4
ORcybozugaroonMatch3.0
ORcybozugaroonMatch3.0sp1
ORcybozugaroonMatch3.0sp2
ORcybozugaroonMatch3.0sp3
ORcybozugaroonMatch3.1
ORcybozugaroonMatch3.1sp1
ORcybozugaroonMatch3.1sp2
ORcybozugaroonMatch3.1sp3
ORcybozugaroonMatch3.5
ORcybozugaroonMatch3.5sp1
ORcybozugaroonMatch3.5sp2
ORcybozugaroonMatch3.5sp3
ORcybozugaroonMatch3.5sp4
ORcybozugaroonMatch3.5sp5
ORcybozugaroonMatch3.7
microsoftinternet_explorerMatch6
ORmicrosoftinternet_explorerMatch7
ORmicrosoftinternet_explorerMatch8
ORmicrosoftinternet_explorerMatch9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cybozu | garoon | * | cpe:2.3:a:cybozu:garoon:*:sp1:*:*:*:*:*:* |
| cybozu | garoon | 2.0 | cpe:2.3:a:cybozu:garoon:2.0:sp1:*:*:*:*:*:* |
| cybozu | garoon | 2.0 | cpe:2.3:a:cybozu:garoon:2.0:sp2:*:*:*:*:*:* |
| cybozu | garoon | 2.0 | cpe:2.3:a:cybozu:garoon:2.0:sp3:*:*:*:*:*:* |
| cybozu | garoon | 2.0 | cpe:2.3:a:cybozu:garoon:2.0:sp4:*:*:*:*:*:* |
| cybozu | garoon | 2.0 | cpe:2.3:a:cybozu:garoon:2.0:sp5:*:*:*:*:*:* |
| cybozu | garoon | 2.0 | cpe:2.3:a:cybozu:garoon:2.0:sp6:*:*:*:*:*:* |
| cybozu | garoon | 2.1 | cpe:2.3:a:cybozu:garoon:2.1:*:*:*:*:*:*:* |
| cybozu | garoon | 2.1 | cpe:2.3:a:cybozu:garoon:2.1:sp1:*:*:*:*:*:* |
| cybozu | garoon | 2.1 | cpe:2.3:a:cybozu:garoon:2.1:sp2:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-6912
2013-12-05 11:00:00
prion
prion
Cross site scripting
2013-12-05 12:55:00
nvd
nvd
CVE-2013-6912
2013-12-05 12:55:37
jvn
jvn
JVN#23981867: Multiple cross-site scripting vulnerabilities in Cybozu Garoon
2013-12-03 00:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
48.3%
Related for CVE-2013-6912