CVE-2013-6915: Cross-site scripting (XSS) vulnerability in the system-administration component in Cybozu Garoon before 3.7...

Security readout for executives and security teams

CVE-2013-6915 is an authenticated cross-site scripting issue in the system-administration component of Cybozu Garoon before 3.7.2. A logged-in attacker could inject script or HTML through unspecified vectors. Sources do not provide CVSS, detailed impact, or evidence of active exploitation. Exposure is likely limited to organizations running Cybozu Garoon before 3.7.2, especially administrative interfaces reachable by authenticated users. Internet exposure is not stated in sources. Treat as a controlled remediation item unless old Garoon versions remain in use. Prioritize upgrade or retirement for any pre-3.7.2 instance because administrative XSS can affect trusted user sessions. Mitigation focus: Upgrade Cybozu Garoon to 3.7.2 or later per vendor guidance.; Restrict access to Garoon administration functions to trusted users.; Review Cybozu and JVN advisories for environment-specific instructions..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.