Lucene search

K
cvelistMicrosoftCVELIST:CVE-2013-5042
HistoryDec 11, 2013 - 12:00 a.m.

CVE-2013-5042

2013-12-1100:00:00
microsoft
www.cve.org
3

AI Score

5.1

Confidence

High

EPSS

0.68

Percentile

98.0%

Cross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport protocol data, aka “SignalR XSS Vulnerability.”

AI Score

5.1

Confidence

High

EPSS

0.68

Percentile

98.0%