CVE-2013-6912: XSS

Q: What is the severity of CVE-2013-6912?

CVE-2013-6912 has been classified as a moderate severity vulnerability due to its potential for exploitation through cross-site scripting.

Q: How do I fix CVE-2013-6912?

To fix CVE-2013-6912, upgrade to Cybozu Garoon version 3.7.2 or later, which addresses this vulnerability.

Q: Which versions of Cybozu Garoon are affected by CVE-2013-6912?

CVE-2013-6912 affects Cybozu Garoon versions prior to 3.7.2 and specific earlier versions like 2.0 through 3.5.

Q: What type of vulnerability is CVE-2013-6912?

CVE-2013-6912 is a cross-site scripting (XSS) vulnerability, allowing attackers to inject arbitrary web scripts or HTML.

Q: Who is at risk from CVE-2013-6912?

Remote authenticated users of affected versions of Cybozu Garoon using Internet Explorer 6 through 9 are at risk from CVE-2013-6912.

Published Dec 5, 2013

Updated

Cross-site scripting (XSS) vulnerability in a calendar component in Cybozu Garoon before 3.7.2, when Internet Explorer 6 through 9 is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

70 affected components

Cybozu Garoon<=3.7

Cybozu Garoon=2.0-sp1

Cybozu Garoon=2.0-sp2

Cybozu Garoon=2.0-sp3

Cybozu Garoon=2.0-sp4

Cybozu Garoon=2.0-sp5

Cybozu Garoon=2.0-sp6

Cybozu Garoon=2.1

Cybozu Garoon=2.1-sp1

Cybozu Garoon=2.1-sp2

Cybozu Garoon=2.1-sp3

Cybozu Garoon=2.5

Cybozu Garoon=2.5-sp1

Cybozu Garoon=2.5-sp2

Cybozu Garoon=2.5-sp3

Cybozu Garoon=2.5-sp4

Cybozu Garoon=3.0

Cybozu Garoon=3.0-sp1

Cybozu Garoon=3.0-sp2

Cybozu Garoon=3.0-sp3

Cybozu Garoon=3.1

Cybozu Garoon=3.1-sp1

Cybozu Garoon=3.1-sp2

Cybozu Garoon=3.1-sp3

Cybozu Garoon=3.5

Cybozu Garoon=3.5-sp1

Cybozu Garoon=3.5-sp2

Cybozu Garoon=3.5-sp3

Cybozu Garoon=3.5-sp4

Cybozu Garoon=3.5-sp5

Cybozu Garoon=3.7

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

All of the following

Any of the following