CVE-2015-1653

Microsoft SharePoint Foundation 2013 SP1-SharePoint Server 2013 SP1...

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1032111

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-036

Scores

EPSS 0.0880

EPSS Percentile 94.7%

Details

CWE

CWE-79

Status published

Products (2)

microsoft/sharepoint_foundation 2013 sp1

microsoft/sharepoint_server 2013 sp1

Published Apr 14, 2015

Tracked Since Feb 18, 2026