Vulnerability-Lookup

JVNDB-2013-000113

Vulnerability from jvndb - Published: 2013-12-03 13:37 - Updated:2013-12-06 10:42

Severity

N/A (UNKNOWN) - -

Summary

Multiple cross-site scripting vulnerabilities in Cybozu Garoon

Details

Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains multiple cross-site scripting vulnerabilities.

References

Type

URL

	JVN	http://jvn.jp/en/jp/JVN23981867/index.html
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6900
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6901
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6902
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6903
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6904
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6905
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6906
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6907
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6908
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6909
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6910
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6911
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6912
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6913
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6914
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6915
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6916
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6900
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6901
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6902
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6903
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6904
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6905
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6906
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6907
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6908
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6909
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6910
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6911
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6912
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6913
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6914
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6915
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6916
	Cross-site Scripting(CWE-79)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

Cybozu, Inc.

Cybozu Garoon

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000113.html",
  "dc:date": "2013-12-06T10:42+09:00",
  "dcterms:issued": "2013-12-03T13:37+09:00",
  "dcterms:modified": "2013-12-06T10:42+09:00",
  "description": "Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains multiple cross-site scripting vulnerabilities.",
  "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000113.html",
  "sec:cpe": {
    "#text": "cpe:/a:cybozu:garoon",
    "@product": "Cybozu Garoon",
    "@vendor": "Cybozu, Inc.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2013-000113",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN23981867/index.html",
      "@id": "JVN#23981867",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6900",
      "@id": "CVE-2013-6900",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6901",
      "@id": "CVE-2013-6901",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6902",
      "@id": "CVE-2013-6902",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6903",
      "@id": "CVE-2013-6903",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6904",
      "@id": "CVE-2013-6904",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6905",
      "@id": "CVE-2013-6905",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6906",
      "@id": "CVE-2013-6906",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6907",
      "@id": "CVE-2013-6907",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6908",
      "@id": "CVE-2013-6908",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6909",
      "@id": "CVE-2013-6909",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6910",
      "@id": "CVE-2013-6910",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6911",
      "@id": "CVE-2013-6911",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6912",
      "@id": "CVE-2013-6912",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6913",
      "@id": "CVE-2013-6913",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6914",
      "@id": "CVE-2013-6914",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6915",
      "@id": "CVE-2013-6915",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6916",
      "@id": "CVE-2013-6916",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6900",
      "@id": "CVE-2013-6900",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6901",
      "@id": "CVE-2013-6901",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6902",
      "@id": "CVE-2013-6902",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6903",
      "@id": "CVE-2013-6903",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6904",
      "@id": "CVE-2013-6904",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6905",
      "@id": "CVE-2013-6905",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6906",
      "@id": "CVE-2013-6906",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6907",
      "@id": "CVE-2013-6907",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6908",
      "@id": "CVE-2013-6908",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6909",
      "@id": "CVE-2013-6909",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6910",
      "@id": "CVE-2013-6910",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6911",
      "@id": "CVE-2013-6911",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6912",
      "@id": "CVE-2013-6912",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6913",
      "@id": "CVE-2013-6913",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6914",
      "@id": "CVE-2013-6914",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6915",
      "@id": "CVE-2013-6915",
      "@source": "NVD"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6916",
      "@id": "CVE-2013-6916",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-79",
      "@title": "Cross-site Scripting(CWE-79)"
    }
  ],
  "title": "Multiple cross-site scripting vulnerabilities in Cybozu Garoon"
}

CVE-2013-6900 (GCVE-0-2013-6900)

Vulnerability from cvelistv5 – Published: 2013-12-05 11:00 – Updated: 2024-08-06 17:53

Summary

Cross-site scripting (XSS) vulnerability in the system-administration component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

jpcert

References

4 references

URL	Tags
http://cs.cybozu.co.jp/information/20131202up01.php	x_refsource_MISC
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113	third-party-advisoryx_refsource_JVNDB
http://jvn.jp/en/jp/JVN23981867/index.html	third-party-advisoryx_refsource_JVN
https://support.cybozu.com/ja-jp/article/6153	x_refsource_CONFIRM

Date Public

2013-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:53:44.644Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
          },
          {
            "name": "JVNDB-2013-000113",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
          },
          {
            "name": "JVN#23981867",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.cybozu.com/ja-jp/article/6153"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in the system-administration component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-05T07:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
        },
        {
          "name": "JVNDB-2013-000113",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
        },
        {
          "name": "JVN#23981867",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.cybozu.com/ja-jp/article/6153"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2013-6900",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in the system-administration component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://cs.cybozu.co.jp/information/20131202up01.php",
              "refsource": "MISC",
              "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
            },
            {
              "name": "JVNDB-2013-000113",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
            },
            {
              "name": "JVN#23981867",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
            },
            {
              "name": "https://support.cybozu.com/ja-jp/article/6153",
              "refsource": "CONFIRM",
              "url": "https://support.cybozu.com/ja-jp/article/6153"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2013-6900",
    "datePublished": "2013-12-05T11:00:00.000Z",
    "dateReserved": "2013-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T17:53:44.644Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-6901 (GCVE-0-2013-6901)

Vulnerability from cvelistv5 – Published: 2013-12-05 11:00 – Updated: 2024-08-06 17:53

Summary

Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

jpcert

References

5 references

URL	Tags
http://cs.cybozu.co.jp/information/20131202up01.php	x_refsource_MISC
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113	third-party-advisoryx_refsource_JVNDB
http://osvdb.org/100555	vdb-entryx_refsource_OSVDB
http://jvn.jp/en/jp/JVN23981867/index.html	third-party-advisoryx_refsource_JVN
https://support.cybozu.com/ja-jp/article/6193	x_refsource_CONFIRM

Date Public

2013-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:53:44.638Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
          },
          {
            "name": "JVNDB-2013-000113",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
          },
          {
            "name": "100555",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/100555"
          },
          {
            "name": "JVN#23981867",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.cybozu.com/ja-jp/article/6193"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-11T13:57:00.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
        },
        {
          "name": "JVNDB-2013-000113",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
        },
        {
          "name": "100555",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/100555"
        },
        {
          "name": "JVN#23981867",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.cybozu.com/ja-jp/article/6193"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2013-6901",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://cs.cybozu.co.jp/information/20131202up01.php",
              "refsource": "MISC",
              "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
            },
            {
              "name": "JVNDB-2013-000113",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
            },
            {
              "name": "100555",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/100555"
            },
            {
              "name": "JVN#23981867",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
            },
            {
              "name": "https://support.cybozu.com/ja-jp/article/6193",
              "refsource": "CONFIRM",
              "url": "https://support.cybozu.com/ja-jp/article/6193"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2013-6901",
    "datePublished": "2013-12-05T11:00:00.000Z",
    "dateReserved": "2013-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T17:53:44.638Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-6902 (GCVE-0-2013-6902)

Vulnerability from cvelistv5 – Published: 2013-12-05 11:00 – Updated: 2024-08-06 17:53

Summary

Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

jpcert

References

4 references

URL	Tags
http://cs.cybozu.co.jp/information/20131202up01.php	x_refsource_MISC
https://support.cybozu.com/ja-jp/article/5838	x_refsource_CONFIRM
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113	third-party-advisoryx_refsource_JVNDB
http://jvn.jp/en/jp/JVN23981867/index.html	third-party-advisoryx_refsource_JVN

Date Public

2013-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:53:45.553Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.cybozu.com/ja-jp/article/5838"
          },
          {
            "name": "JVNDB-2013-000113",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
          },
          {
            "name": "JVN#23981867",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-05T07:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.cybozu.com/ja-jp/article/5838"
        },
        {
          "name": "JVNDB-2013-000113",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
        },
        {
          "name": "JVN#23981867",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2013-6902",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in the Space function in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://cs.cybozu.co.jp/information/20131202up01.php",
              "refsource": "MISC",
              "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
            },
            {
              "name": "https://support.cybozu.com/ja-jp/article/5838",
              "refsource": "CONFIRM",
              "url": "https://support.cybozu.com/ja-jp/article/5838"
            },
            {
              "name": "JVNDB-2013-000113",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
            },
            {
              "name": "JVN#23981867",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2013-6902",
    "datePublished": "2013-12-05T11:00:00.000Z",
    "dateReserved": "2013-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T17:53:45.553Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-6903 (GCVE-0-2013-6903)

Vulnerability from cvelistv5 – Published: 2013-12-05 11:00 – Updated: 2024-08-06 17:53

Summary

Cross-site scripting (XSS) vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

jpcert

References

5 references

URL	Tags
http://cs.cybozu.co.jp/information/20131202up01.php	x_refsource_MISC
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113	third-party-advisoryx_refsource_JVNDB
https://support.cybozu.com/ja-jp/article/6165	x_refsource_CONFIRM
http://osvdb.org/100571	vdb-entryx_refsource_OSVDB
http://jvn.jp/en/jp/JVN23981867/index.html	third-party-advisoryx_refsource_JVN

Date Public

2013-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:53:45.289Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
          },
          {
            "name": "JVNDB-2013-000113",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.cybozu.com/ja-jp/article/6165"
          },
          {
            "name": "100571",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/100571"
          },
          {
            "name": "JVN#23981867",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-11T13:57:00.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
        },
        {
          "name": "JVNDB-2013-000113",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.cybozu.com/ja-jp/article/6165"
        },
        {
          "name": "100571",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/100571"
        },
        {
          "name": "JVN#23981867",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2013-6903",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://cs.cybozu.co.jp/information/20131202up01.php",
              "refsource": "MISC",
              "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
            },
            {
              "name": "JVNDB-2013-000113",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
            },
            {
              "name": "https://support.cybozu.com/ja-jp/article/6165",
              "refsource": "CONFIRM",
              "url": "https://support.cybozu.com/ja-jp/article/6165"
            },
            {
              "name": "100571",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/100571"
            },
            {
              "name": "JVN#23981867",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2013-6903",
    "datePublished": "2013-12-05T11:00:00.000Z",
    "dateReserved": "2013-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T17:53:45.289Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-6904 (GCVE-0-2013-6904)

Vulnerability from cvelistv5 – Published: 2013-12-05 11:00 – Updated: 2024-08-06 17:53

Summary

Cross-site scripting (XSS) vulnerability in a note component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

jpcert

References

5 references

URL	Tags
https://support.cybozu.com/ja-jp/article/6395	x_refsource_CONFIRM
http://cs.cybozu.co.jp/information/20131202up01.php	x_refsource_MISC
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113	third-party-advisoryx_refsource_JVNDB
http://osvdb.org/100572	vdb-entryx_refsource_OSVDB
http://jvn.jp/en/jp/JVN23981867/index.html	third-party-advisoryx_refsource_JVN

Date Public

2013-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:53:44.650Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.cybozu.com/ja-jp/article/6395"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
          },
          {
            "name": "JVNDB-2013-000113",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
          },
          {
            "name": "100572",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/100572"
          },
          {
            "name": "JVN#23981867",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in a note component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-11T13:57:00.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.cybozu.com/ja-jp/article/6395"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
        },
        {
          "name": "JVNDB-2013-000113",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
        },
        {
          "name": "100572",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/100572"
        },
        {
          "name": "JVN#23981867",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2013-6904",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in a note component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.cybozu.com/ja-jp/article/6395",
              "refsource": "CONFIRM",
              "url": "https://support.cybozu.com/ja-jp/article/6395"
            },
            {
              "name": "http://cs.cybozu.co.jp/information/20131202up01.php",
              "refsource": "MISC",
              "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
            },
            {
              "name": "JVNDB-2013-000113",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
            },
            {
              "name": "100572",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/100572"
            },
            {
              "name": "JVN#23981867",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2013-6904",
    "datePublished": "2013-12-05T11:00:00.000Z",
    "dateReserved": "2013-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T17:53:44.650Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-6905 (GCVE-0-2013-6905)

Vulnerability from cvelistv5 – Published: 2013-12-05 11:00 – Updated: 2024-08-06 17:53

Summary

Cross-site scripting (XSS) vulnerability in a phone component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

jpcert

References

5 references

URL	Tags
http://cs.cybozu.co.jp/information/20131202up01.php	x_refsource_MISC
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113	third-party-advisoryx_refsource_JVNDB
https://support.cybozu.com/ja-jp/article/6195	x_refsource_CONFIRM
http://osvdb.org/100573	vdb-entryx_refsource_OSVDB
http://jvn.jp/en/jp/JVN23981867/index.html	third-party-advisoryx_refsource_JVN

Date Public

2013-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:53:45.534Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
          },
          {
            "name": "JVNDB-2013-000113",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.cybozu.com/ja-jp/article/6195"
          },
          {
            "name": "100573",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/100573"
          },
          {
            "name": "JVN#23981867",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in a phone component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-11T13:57:00.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
        },
        {
          "name": "JVNDB-2013-000113",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.cybozu.com/ja-jp/article/6195"
        },
        {
          "name": "100573",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/100573"
        },
        {
          "name": "JVN#23981867",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2013-6905",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in a phone component in Cybozu Garoon before 3.7.0, when Internet Explorer or Firefox is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://cs.cybozu.co.jp/information/20131202up01.php",
              "refsource": "MISC",
              "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
            },
            {
              "name": "JVNDB-2013-000113",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
            },
            {
              "name": "https://support.cybozu.com/ja-jp/article/6195",
              "refsource": "CONFIRM",
              "url": "https://support.cybozu.com/ja-jp/article/6195"
            },
            {
              "name": "100573",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/100573"
            },
            {
              "name": "JVN#23981867",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2013-6905",
    "datePublished": "2013-12-05T11:00:00.000Z",
    "dateReserved": "2013-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T17:53:45.534Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-6906 (GCVE-0-2013-6906)

Vulnerability from cvelistv5 – Published: 2013-12-05 11:00 – Updated: 2024-08-06 17:53

Summary

Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon before 3.7.0, when Internet Explorer 6 through 8 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

jpcert

References

5 references

URL	Tags
http://cs.cybozu.co.jp/information/20131202up01.php	x_refsource_MISC
https://support.cybozu.com/ja-jp/article/6174	x_refsource_CONFIRM
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113	third-party-advisoryx_refsource_JVNDB
http://osvdb.org/100574	vdb-entryx_refsource_OSVDB
http://jvn.jp/en/jp/JVN23981867/index.html	third-party-advisoryx_refsource_JVN

Date Public

2013-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:53:45.243Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.cybozu.com/ja-jp/article/6174"
          },
          {
            "name": "JVNDB-2013-000113",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
          },
          {
            "name": "100574",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/100574"
          },
          {
            "name": "JVN#23981867",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon before 3.7.0, when Internet Explorer 6 through 8 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-11T13:57:00.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.cybozu.com/ja-jp/article/6174"
        },
        {
          "name": "JVNDB-2013-000113",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
        },
        {
          "name": "100574",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/100574"
        },
        {
          "name": "JVN#23981867",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2013-6906",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon before 3.7.0, when Internet Explorer 6 through 8 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://cs.cybozu.co.jp/information/20131202up01.php",
              "refsource": "MISC",
              "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
            },
            {
              "name": "https://support.cybozu.com/ja-jp/article/6174",
              "refsource": "CONFIRM",
              "url": "https://support.cybozu.com/ja-jp/article/6174"
            },
            {
              "name": "JVNDB-2013-000113",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
            },
            {
              "name": "100574",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/100574"
            },
            {
              "name": "JVN#23981867",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2013-6906",
    "datePublished": "2013-12-05T11:00:00.000Z",
    "dateReserved": "2013-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T17:53:45.243Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-6907 (GCVE-0-2013-6907)

Vulnerability from cvelistv5 – Published: 2013-12-05 11:00 – Updated: 2024-08-06 17:53

Summary

Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon 2.x and 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

jpcert

References

4 references

URL	Tags
http://cs.cybozu.co.jp/information/20131202up01.php	x_refsource_MISC
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113	third-party-advisoryx_refsource_JVNDB
http://jvn.jp/en/jp/JVN23981867/index.html	third-party-advisoryx_refsource_JVN
https://support.cybozu.com/ja-jp/article/6166	x_refsource_CONFIRM

Date Public

2013-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:53:44.838Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
          },
          {
            "name": "JVNDB-2013-000113",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
          },
          {
            "name": "JVN#23981867",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.cybozu.com/ja-jp/article/6166"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon 2.x and 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-05T07:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
        },
        {
          "name": "JVNDB-2013-000113",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
        },
        {
          "name": "JVN#23981867",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.cybozu.com/ja-jp/article/6166"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2013-6907",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon 2.x and 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://cs.cybozu.co.jp/information/20131202up01.php",
              "refsource": "MISC",
              "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
            },
            {
              "name": "JVNDB-2013-000113",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
            },
            {
              "name": "JVN#23981867",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
            },
            {
              "name": "https://support.cybozu.com/ja-jp/article/6166",
              "refsource": "CONFIRM",
              "url": "https://support.cybozu.com/ja-jp/article/6166"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2013-6907",
    "datePublished": "2013-12-05T11:00:00.000Z",
    "dateReserved": "2013-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T17:53:44.838Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-6908 (GCVE-0-2013-6908)

Vulnerability from cvelistv5 – Published: 2013-12-05 11:00 – Updated: 2024-08-06 17:53

Summary

Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

jpcert

References

4 references

URL	Tags
http://cs.cybozu.co.jp/information/20131202up01.php	x_refsource_MISC
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113	third-party-advisoryx_refsource_JVNDB
https://support.cybozu.com/ja-jp/article/5870	x_refsource_CONFIRM
http://jvn.jp/en/jp/JVN23981867/index.html	third-party-advisoryx_refsource_JVN

Date Public

2013-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:53:44.743Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
          },
          {
            "name": "JVNDB-2013-000113",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.cybozu.com/ja-jp/article/5870"
          },
          {
            "name": "JVN#23981867",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-05T07:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
        },
        {
          "name": "JVNDB-2013-000113",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.cybozu.com/ja-jp/article/5870"
        },
        {
          "name": "JVN#23981867",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2013-6908",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon 3.x before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://cs.cybozu.co.jp/information/20131202up01.php",
              "refsource": "MISC",
              "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
            },
            {
              "name": "JVNDB-2013-000113",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
            },
            {
              "name": "https://support.cybozu.com/ja-jp/article/5870",
              "refsource": "CONFIRM",
              "url": "https://support.cybozu.com/ja-jp/article/5870"
            },
            {
              "name": "JVN#23981867",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2013-6908",
    "datePublished": "2013-12-05T11:00:00.000Z",
    "dateReserved": "2013-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T17:53:44.743Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2013-6909 (GCVE-0-2013-6909)

Vulnerability from cvelistv5 – Published: 2013-12-05 11:00 – Updated: 2024-08-06 17:53

Summary

Cross-site scripting (XSS) vulnerability in a report component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

jpcert

References

4 references

URL	Tags
https://support.cybozu.com/ja-jp/article/6384	x_refsource_CONFIRM
http://cs.cybozu.co.jp/information/20131202up01.php	x_refsource_MISC
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113	third-party-advisoryx_refsource_JVNDB
http://jvn.jp/en/jp/JVN23981867/index.html	third-party-advisoryx_refsource_JVN

Date Public

2013-12-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T17:53:45.503Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.cybozu.com/ja-jp/article/6384"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
          },
          {
            "name": "JVNDB-2013-000113",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
          },
          {
            "name": "JVN#23981867",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-12-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in a report component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-05T07:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.cybozu.com/ja-jp/article/6384"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
        },
        {
          "name": "JVNDB-2013-000113",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
        },
        {
          "name": "JVN#23981867",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2013-6909",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in a report component in Cybozu Garoon before 3.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.cybozu.com/ja-jp/article/6384",
              "refsource": "CONFIRM",
              "url": "https://support.cybozu.com/ja-jp/article/6384"
            },
            {
              "name": "http://cs.cybozu.co.jp/information/20131202up01.php",
              "refsource": "MISC",
              "url": "http://cs.cybozu.co.jp/information/20131202up01.php"
            },
            {
              "name": "JVNDB-2013-000113",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000113"
            },
            {
              "name": "JVN#23981867",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN23981867/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2013-6909",
    "datePublished": "2013-12-05T11:00:00.000Z",
    "dateReserved": "2013-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-06T17:53:45.503Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

JVNDB-2013-000113

CVE-2013-6900 (GCVE-0-2013-6900)

CVE-2013-6901 (GCVE-0-2013-6901)

CVE-2013-6902 (GCVE-0-2013-6902)

CVE-2013-6903 (GCVE-0-2013-6903)

CVE-2013-6904 (GCVE-0-2013-6904)

CVE-2013-6905 (GCVE-0-2013-6905)

CVE-2013-6906 (GCVE-0-2013-6906)

CVE-2013-6907 (GCVE-0-2013-6907)

CVE-2013-6908 (GCVE-0-2013-6908)

CVE-2013-6909 (GCVE-0-2013-6909)

Tags

Sightings

Nomenclature