2 matches found
CVE-2015-2420: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS...
4.3CVSS5.9AI score0.08807EPSS
SaveExploits0References2
20