Test ID:	1.3.6.1.4.1.25623.1.0.807850
Category:	Web application abuses
Title:	Cybozu Garoon 3.x < 4.2.0 Information Disclosure and XSS Vulnerabilities
Summary:	Cybozu Garoon is prone to information disclosure and; cross-site scripting (XSS) vulnerabilities.
Description:	Summary: Cybozu Garoon is prone to information disclosure and cross-site scripting (XSS) vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - The application does not properly restrict loading of IMG elements. - An insufficient validation of input passed to unspecified vectors. Vulnerability Impact: Successful exploitation will allow remote attackers to inject arbitrary web script or HTML code and gain access to potentially sensitive information. Affected Software/OS: Cybozu Garoon versions 3.x and 4.x prior to 4.2.0. Solution: Update to version 4.2.0 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7776 http://jvn.jp/en/jp/JVN53542912/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2016-000085 Common Vulnerability Exposure (CVE) ID: CVE-2015-7775 http://jvn.jp/en/jp/JVN49285177/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2016-000084
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.