CVE-2015-2556

EPSS 15.62%
Veröffentlicht 14.10.2015 01:59:11
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "Microsoft SharePoint Information Disclosure Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Sharepoint Server Version 2007 Update sp3

Microsoft ≫ Sharepoint Server Version 2010 Update sp2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	15.62%	0.964

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-110

http://www.securitytracker.com/id/1033804

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2015-2556

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-2556

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-2556

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-2556