CVE-2013-6913: Cross-site scripting (XSS) vulnerability in a search component in Cybozu Garoon before 3.7.2, when Internet...

Security readout for executives and security teams

Cybozu Garoon versions before 3.7.2 had a cross-site scripting flaw in a search component when Internet Explorer was used. A logged-in attacker could inject script or HTML. Public sources do not provide CVSS, affected edition details, or evidence of active exploitation. Exposure is most likely in organizations still running Cybozu Garoon before 3.7.2, especially where Internet Explorer remains usable for the application. The bundle does not identify specific editions or deployment configurations. Treat as a targeted hygiene issue unless legacy Garoon or Internet Explorer use remains in the environment. Prioritize upgrade verification for business units still dependent on older Cybozu Garoon deployments. Mitigation focus: Upgrade Cybozu Garoon to version 3.7.2 or later.; Review Cybozu and JVN advisories for product-specific guidance.; Restrict access to Garoon to trusted authenticated users..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.