Japan Total System Co.,ltd. Groupsession
7 CVEs affecting Japan Total System Co.,ltd. Groupsession. Latest disclosed: 2021-07-30. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-2165 | Medium | 6.5 | 2017-06-09 | GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via… |
CVE-2021-20789 | Medium | 6.1 | 2021-07-30 | Open redirect vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to th… |
CVE-2017-2166 | Medium | 6.1 | 2018-01-26 | Open redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks… |
CVE-2021-20787 | Medium | 4.8 | 2021-07-30 | Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0… |
CVE-2021-20785 | Medium | 4.8 | 2021-07-30 | Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0… |
CVE-2021-20788 | Medium | 4.3 | 2021-07-30 | Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byClou… |
CVE-2021-20786 | Medium | 4.3 | 2021-07-30 | Cross-site request forgery (CSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud… |