Description
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-022
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031895
Scores
EPSS
0.0688
EPSS Percentile
93.4%
Details
CWE
CWE-79
Status
published
Products (2)
microsoft/sharepoint_foundation
2013 (2 CPE variants)
microsoft/sharepoint_server
2013 (2 CPE variants)
Published
Mar 11, 2015
Tracked Since
Feb 18, 2026