Login Request a demo
Unscored severity · published Dec 13, 2013
CVE-2013-6005
Cross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button
–
CVSS
1.3%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
Dezie · Cybozu
through 8.0.7; 8.0.0; 8.0.1; 8.0.2; 8.0.3; 8.0.4; +2 more · source: NVD
Affected product
DE
Dezie
Cybozu
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-6005
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-6005
cs.cybozu.co.jp
http://cs.cybozu.co.jp/information/20131209up11.php
jvn.jp
http://jvn.jp/en/jp/JVN21336955/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000118.html
osvdb.org
http://osvdb.org/100819
Vendor Advisory
http://secunia.com/advisories/55962
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/89577
More from Dezie
9.1
CVE-2018-0705
Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests
7.5
CVE-2016-7833
Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors
5.3
CVE-2016-7832
Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors
–
CVE-2014-5314
Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via…
–
CVE-2011-1334
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before…