CVE-2014-1820
Microsoft SQL Server 2012 SP1 and 2014 - Cross-Site Scripting via Crafted URL
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in Master Data Services (MDS) in Microsoft SQL Server 2012 SP1 and 2014 on 64-bit platforms allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "SQL Master Data Services XSS Vulnerability."
References (4)
Core 4
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/60676
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030716
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-044
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/69071
Scores
EPSS
0.1472
EPSS Percentile
96.3%
Details
CWE
CWE-79
Status
published
Products (2)
microsoft/sql_server
2012 sp1
microsoft/sql_server
2014
Published
Aug 12, 2014
Tracked Since
Feb 18, 2026