CVE-2015-2522

EPSS 10.06%
Veröffentlicht 09.09.2015 00:59:34
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content, aka "Microsoft SharePoint XSS Spoofing Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Sharepoint Foundation Version2013 Updatesp1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	10.06%	0.928

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-099

http://www.securitytracker.com/id/1033489

https://nvd.nist.gov/vuln/detail/CVE-2015-2522

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-2522

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-2522

EUVD