CVE-2015-2522
Microsoft SharePoint Foundation 2013 SP1 - Authenticated Cross-Site Scripting
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content, aka "Microsoft SharePoint XSS Spoofing Vulnerability."
References (3)
Core 3
Core References
Vendor Advisory x_refsource_confirm
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-099
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1033489
Scores
EPSS
0.1031
EPSS Percentile
95.2%
Details
CWE
CWE-79
Status
published
Products (1)
microsoft/sharepoint_foundation
2013 sp1
Published
Sep 09, 2015
Tracked Since
Feb 18, 2026