Lucene search

K
cve[email protected]CVE-2015-1636
HistoryMar 11, 2015 - 10:59 a.m.

CVE-2015-1636

2015-03-1110:59:00
CWE-79
web.nvd.nist.gov
42
cve-2015-1636
microsoft sharepoint
xss
vulnerability
nvd
security

4.6 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.02 Low

EPSS

Percentile

88.8%

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka “Microsoft SharePoint XSS Vulnerability.”

4.6 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.02 Low

EPSS

Percentile

88.8%