4.3
CVSSv2

CVE-2011-1333

Published: 29/06/2011 Updated: 30/06/2011
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 up to and including 2.1.3 allows remote malicious users to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."

Vulnerable Product Search on Vulmon Subscribe to Product

cybozu garoon 2.1.2

cybozu garoon 2.0.5

cybozu garoon 2.0.4

cybozu garoon 2.1.1

cybozu garoon 2.0.1

cybozu garoon 2.0.3

cybozu garoon 2.0.0

cybozu garoon 2.1.3

cybozu garoon 2.0.6

cybozu garoon 2.1.0

cybozu garoon 2.0.2

cybozu office 6