CVE-2015-1700

EPSS 12.14%
Veröffentlicht 13.05.2015 10:59:28
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "Microsoft SharePoint Page Content Vulnerabilities."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Sharepoint Foundation Version 2010 Update sp2

Microsoft ≫ Sharepoint Server Version 2007 Update sp3

Microsoft ≫ Sharepoint Server Version 2010 Update sp2

Microsoft ≫ Sharepoint Server Version 2013 Update sp1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	12.14%	0.958

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6	6.8	6.4	AV:N/AC:M/Au:S/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securitytracker.com/id/1032296

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-047

https://nvd.nist.gov/vuln/detail/CVE-2015-1700

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-1700

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-1700

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-1700