CVE-2015-7776

4.3 mediumEPSS 1.3%

Medium (4.3) in cybozu garoon. EPSS 1.3% chance of exploitation in the next 30 days.

Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, a different vulnerability than CVE-2016-1196.

Severity

CVSS 3.0

4.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2016-06-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cybozu:garoon

References

http://jvn.jp/en/jp/JVN53542912/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000085
https://support.cybozu.com/ja-jp/article/8757
https://support.cybozu.com/ja-jp/article/8897
https://support.cybozu.com/ja-jp/article/8951

Check your stack JSON