Lucene search
MicrosoftCVE-2015-2522HistorySep 09, 2015 - 12:59 a.m.
CVE-2015-2522
2015-09-0900:59:34
CWE-79
microsoft
web.nvd.nist.gov
49
cve
2015
2522
cross-site scripting
xss
vulnerability
microsoft sharepoint
foundation 2013
nvd
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
4.7
Confidence
High
EPSS
0.004
Percentile
74.1%
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content, aka “Microsoft SharePoint XSS Spoofing Vulnerability.”
Affected configurations
Node
microsoftsharepoint_foundationMatch2013sp1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | sharepoint_foundation | 2013 | cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2015-2522
2015-09-09 00:59:34
cvelist
cvelist
CVE-2015-2522
2015-09-09 00:00:00
prion
prion
Cross site scripting
2015-09-09 00:59:00
symantec
symantec
Microsoft SharePoint CVE-2015-2522 HTML Injection Vulnerability
2015-09-08 00:00:00
mskb
mskb
nessus
nessus
kaspersky
kaspersky
KLA10661 Multiple vulnerabillities in Microsoft Office
2015-09-08 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
4.7
Confidence
High
EPSS
0.004
Percentile
74.1%
Related for CVE-2015-2522