CVE-2019-5991

EUVD-2019-15559 · Published Sep 12, 2019

SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Technologies

Cybozu Garoon

Weaknesses

CWE-89

CVSS scores

v3.17.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
v2.06.5AV:N/AC:L/Au:S/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

http://jvn.jp/en/jp/JVN71877187/index.html
https://kb.cybozu.support/article/35975

Potentially impacted assets

See if this affects your attack surface