CVE-2015-1636

EPSS 6.88%
Veröffentlicht 11.03.2015 10:59:37
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Sharepoint Server Version 2013 Update - Edition - SwEdition gold

Microsoft ≫ Sharepoint Server Version 2013 Update sp1

Microsoft ≫ Sharepoint Foundation Version 2013 Update - Edition - SwEdition gold

Microsoft ≫ Sharepoint Foundation Version 2013 Update sp1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	6.88%	0.932

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-022

http://www.securitytracker.com/id/1031895

https://nvd.nist.gov/vuln/detail/CVE-2015-1636

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-1636

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-1636

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-1636