Unrated severityNVD Advisory· Published Jul 20, 2014· Updated Jun 17, 2026
CVE-2014-1992
CVE-2014-1992
Description
Cross-site scripting (XSS) vulnerability in the Messages functionality in Cybozu Garoon 3.1.x, 3.5.x, and 3.7.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:cybozu:garoon:3.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:3.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:3.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:3.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:3.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:3.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:3.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:3.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:3.7:sp1:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:3.7:sp2:*:*:*:*:*:*
- cpe:2.3:a:cybozu:garoon:3.7:sp3:*:*:*:*:*:*
- (no CPE)range: <3.7 SP4
Patches
Vulnerability mechanics
References
3- cs.cybozu.co.jp/information/gr20140714up05.phpnvdVendor Advisory
- jvn.jp/en/jp/JVN94838679/index.htmlnvdVendor Advisory
- jvndb.jvn.jp/jvndb/JVNDB-2014-000078nvdVendor Advisory
News mentions
0No linked articles in our index yet.