Security Advisory
CVE-2018-0607
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.