Test Kennung:	1.3.6.1.4.1.25623.1.0.807850
Kategorie:	Web application abuses
Titel:	Cybozu Garoon Information Disclosure And Cross-Site Scripting Vulnerabilities - Jun16
Zusammenfassung:	cybozu garoon is vulnerable to information disclosure and cross-site scripting vulnerabilities.
Beschreibung:	Summary: cybozu garoon is vulnerable to information disclosure and cross-site scripting vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - The application does not properly restrict loading of IMG elements. - An insufficient validation of input passed to unspecified vectors. Vulnerability Impact: Successful exploitation will allow remote attackers to inject arbitrary web script or HTML code and gain access to potentially sensitive information. Affected Software/OS: Cybozu Garoon versions 3.x and 4.x before 4.2.0 Solution: Upgrade to Cybozu Garoon 4.2.0 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7776 http://jvn.jp/en/jp/JVN53542912/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2016-000085 Common Vulnerability Exposure (CVE) ID: CVE-2015-7775 http://jvn.jp/en/jp/JVN49285177/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2016-000084
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.