Lucene search

K
nvd[email protected]NVD:CVE-2015-1653
HistoryApr 14, 2015 - 8:59 p.m.

CVE-2015-1653

2015-04-1420:59:15
CWE-79
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5 Medium

AI Score

Confidence

High

0.474 Medium

EPSS

Percentile

97.5%

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka “Microsoft SharePoint XSS Vulnerability.”

Affected configurations

NVD
Node
microsoftsharepoint_foundationMatch2013sp1
OR
microsoftsharepoint_serverMatch2013sp1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5 Medium

AI Score

Confidence

High

0.474 Medium

EPSS

Percentile

97.5%