CVE-2015-1757: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in adfs/ls in Active Directory Federation Services AD FS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 allows remote attackers to inject arbitrary web script or HTML via the wct parameter, aka "ADFS XSS Elevation of Privilege Vulnerability....

PT-2015-1601

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services AD FS versions in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Description The issue allows remote attackers to inject arbitrary web script or HTML via the wct parameter. This is due to the...