cbcvebase.
CVE-2013-6912
published 2013-12-05

CVE-2013-6912: Cross-site scripting (XSS) vulnerability in a calendar component in Cybozu Garoon before 3.7.2, when Internet Explorer 6 through 9 is used, allows remote…

PriorityP412low3.5CVSS 2.0
AVNACMAuSCNIPAN
EPSS
0.95%
56.7th percentile
Cross-site scripting (XSS) vulnerability in a calendar component in Cybozu Garoon before 3.7.2, when Internet Explorer 6 through 9 is used, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected

8 ranges
VendorProductVersion rangeFixed in
cybozugaroon<= 3.7
cybozugaroon
cybozugaroon
cybozugaroon
cybozugaroon
cybozugaroon
cybozugaroon
cybozugaroon
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.