CVE-2015-6039

EPSS 9.06%
Veröffentlicht 14.10.2015 01:59:15
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content in an Office Marketplace instance, aka "Microsoft SharePoint Security Feature Bypass Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Sharepoint Foundation Version 2013 Update sp1

Microsoft ≫ Sharepoint Server Version 2013 Update sp1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	9.06%	0.946

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-110

http://www.securitytracker.com/id/1033804

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2015-6039

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-6039

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-6039

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-6039