CVE-2014-1995: XSS
Published Jul 20, 2014
·Updated
Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
27 affected components
Cybozu Garoon=2.0.0
Cybozu Garoon=2.1.0
Cybozu Garoon=2.1.1
Cybozu Garoon=2.1.2
Cybozu Garoon=2.1.3
Cybozu Garoon=2.5.0
Cybozu Garoon=2.5.1
Cybozu Garoon=2.5.2
Cybozu Garoon=2.5.3
Cybozu Garoon=2.5.4
Cybozu Garoon=3.0.0
Cybozu Garoon=3.0.1
Cybozu Garoon=3.0.2
Cybozu Garoon=3.0.3
Cybozu Garoon=3.1.0
Cybozu Garoon=3.1.1
Cybozu Garoon=3.1.2
Cybozu Garoon=3.1.3
Cybozu Garoon=3.5.0
Cybozu Garoon=3.5.1
Cybozu Garoon=3.5.2
Cybozu Garoon=3.5.3
Cybozu Garoon=3.5.4
Cybozu Garoon=3.5.5
Cybozu Garoon=3.7-sp1
Cybozu Garoon=3.7-sp2
Cybozu Garoon=3.7-sp3
Event History
Jul 20, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-1995?
CVE-2014-1995 is categorized as a medium severity cross-site scripting vulnerability.
2
How do I fix CVE-2014-1995?
To fix CVE-2014-1995, update Cybozu Garoon to version 3.7 SP4 or later.
3
Who is affected by CVE-2014-1995?
CVE-2014-1995 affects authenticated users of Cybozu Garoon versions 2.x and 3.x prior to 3.7 SP4.
4
What is the impact of CVE-2014-1995?
The impact of CVE-2014-1995 allows remote authenticated users to execute arbitrary web scripts or HTML.
5
When was CVE-2014-1995 published?
CVE-2014-1995 was published on July 14, 2014.