CVE-2015-1636

2015-03-1110:59:37

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

4.7

Confidence

High

EPSS

0.023

Percentile

89.7%

JSON

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka “Microsoft SharePoint XSS Vulnerability.”

Affected configurations

Nvd

Node

microsoftsharepoint_serverMatch2013--gold

microsoftsharepoint_serverMatch2013sp1

Node

microsoftsharepoint_foundationMatch2013--gold

microsoftsharepoint_foundationMatch2013sp1

VendorProductVersionCPE
microsoftsharepoint_server2013cpe:2.3:a:microsoft:sharepoint_server:2013:-:-:*:gold:*:*:*
microsoftsharepoint_server2013cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*
microsoftsharepoint_foundation2013cpe:2.3:a:microsoft:sharepoint_foundation:2013:-:-:*:gold:*:*:*
microsoftsharepoint_foundation2013cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	sharepoint_server	2013	cpe:2.3:a:microsoft:sharepoint_server:2013:-:-::gold:::
microsoft	sharepoint_server	2013	cpe:2.3:a:microsoft:sharepoint_server:2013:sp1::::::
microsoft	sharepoint_foundation	2013	cpe:2.3:a:microsoft:sharepoint_foundation:2013:-:-::gold:::
microsoft	sharepoint_foundation	2013	cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1::::::