CVE-2016-4908

4.3 mediumEPSS 1.1%

Medium (4.3) in cybozu garoon. EPSS 1.1% chance of exploitation in the next 30 days.

Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unspecified vectors.

Severity

CVSS 3.0

4.3 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2017-06-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cybozu:garoon

References

http://www.securityfocus.com/bid/94966
http://www.securityfocus.com/bid/97912
https://jvn.jp/en/jp/JVN14631222/index.html
https://support.cybozu.com/ja-jp/article/9399
http://www.securityfocus.com/bid/94966

Check your stack JSON