Unscored severity · published Jun 29, 2011
CVE-2011-1334
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the mail system."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Collaborex · Cybozu
through 1.1; 1.0 · source: NVD
DE
Dezie · Cybozu
through 6.0; 1.0; 2.0; 3.0; 4.0; 5.0; +1 more · source: NVD
GA
Garoon · Cybozu
2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +5 more · source: NVD
MA
Mailwise · Cybozu
through 3.0; 1.0; 2.0; 2.1 · source: NVD
OF
Office · Cybozu
6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1334
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1334
Patch
http://cybozu.co.jp/products/dl/notice/detail/0019.html
jvn.jp
http://jvn.jp/en/jp/JVN54074460/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000046
Vendor Advisory
http://secunia.com/advisories/45043
www.osvdb.org
http://www.osvdb.org/73317
www.securityfocus.com
http://www.securityfocus.com/bid/48446
More from Collaborex
–
CVE-2006-4491
Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote…