CVE-2013-6903: Cross-site scripting (XSS) vulnerability in a schedule component in Cybozu Garoon before 3.7.0, when Intern...

Security readout for executives and security teams

CVE-2013-6903 is a cross-site scripting issue in the schedule component of Cybozu Garoon before 3.7.0. In affected browser contexts, an attacker could inject script or HTML. The sources do not provide severity scoring, exploit details, or evidence of active exploitation. Exposure is most likely limited to organizations running Cybozu Garoon versions earlier than 3.7.0, especially where the schedule component is used through Internet Explorer or Firefox. The source bundle does not identify hosted versus on-premises deployment scope. Treat this as an inventory-and-remediation item, not an emergency based on current evidence. Prioritize faster if legacy Garoon is internet-accessible, still business-critical, or used with old browsers. Mitigation focus: Identify any Cybozu Garoon deployments and current versions.; Upgrade Garoon deployments before 3.7.0 to 3.7.0 or later where applicable.; Review Cybozu and JVN guidance for official remediation details..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.