CVE-2013-6906: XSS

Q: What is the severity of CVE-2013-6906?

The severity of CVE-2013-6906 is classified as medium due to its cross-site scripting capabilities.

Q: How do I fix CVE-2013-6906?

To fix CVE-2013-6906, users should upgrade Cybozu Garoon to version 3.7.0 or later.

Q: What software is affected by CVE-2013-6906?

CVE-2013-6906 affects Cybozu Garoon versions earlier than 3.7.0 when used with Internet Explorer 6 to 8.

Q: Can CVE-2013-6906 be exploited remotely?

Yes, CVE-2013-6906 can be exploited remotely by attackers through injected scripts.

Q: What type of vulnerability is CVE-2013-6906?

CVE-2013-6906 is classified as a cross-site scripting (XSS) vulnerability.

Published Dec 5, 2013

Updated

Cross-site scripting (XSS) vulnerability in a mail component in Cybozu Garoon before 3.7.0, when Internet Explorer 6 through 8 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

64 affected components

Cybozu Garoon<=3.5

Cybozu Garoon=2.0-sp1

Cybozu Garoon=2.0-sp2

Cybozu Garoon=2.0-sp3

Cybozu Garoon=2.0-sp4

Cybozu Garoon=2.0-sp5

Cybozu Garoon=2.0-sp6

Cybozu Garoon=2.1

Cybozu Garoon=2.1-sp1

Cybozu Garoon=2.1-sp2

Cybozu Garoon=2.1-sp3

Cybozu Garoon=2.5

Cybozu Garoon=2.5-sp1

Cybozu Garoon=2.5-sp2

Cybozu Garoon=2.5-sp3

Cybozu Garoon=2.5-sp4

Cybozu Garoon=3.0

Cybozu Garoon=3.0-sp1

Cybozu Garoon=3.0-sp2

Cybozu Garoon=3.0-sp3

Cybozu Garoon=3.1

Cybozu Garoon=3.1-sp1

Cybozu Garoon=3.1-sp2

Cybozu Garoon=3.1-sp3

Cybozu Garoon=3.5

Cybozu Garoon=3.5-sp1

Cybozu Garoon=3.5-sp2

Cybozu Garoon=3.5-sp3

Cybozu Garoon=3.5-sp4

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

All of the following

Any of the following