CVE-2015-1700
Microsoft SharePoint Foundation and Server - Remote Code Execution via Crafted Page Content
Title source: llmDescription
Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "Microsoft SharePoint Page Content Vulnerabilities."
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032296
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-047
Scores
EPSS
0.1214
EPSS Percentile
95.7%
Details
CWE
CWE-20
Status
published
Products (4)
microsoft/sharepoint_foundation
2010 sp2
microsoft/sharepoint_server
2007 sp3
microsoft/sharepoint_server
2010 sp2
microsoft/sharepoint_server
2013 sp1
Published
May 13, 2015
Tracked Since
Feb 18, 2026