CVE-2015-2420
Microsoft System Center Operations Manager 2012 XSS via Crafted URL
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS Vulnerability."
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1033245
Patch, Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-086
Scores
EPSS
0.0881
EPSS Percentile
94.7%
Details
CWE
CWE-79
Status
published
Products (1)
microsoft/system_center_operations_manager
2012 r2_rollup1 (22 CPE variants)
Published
Aug 15, 2015
Tracked Since
Feb 18, 2026