CVE-2015-1653 — Cross-site Scripting in Microsoft Sharepoint Foundation

CWE-79 — Cross-site Scripting5 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
9.9%
top 7.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Sharepoint FoundationMicrosoft Sharepoint Server
Timeline
PublishedApr 14
Latest updateMay 14

Description

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-48r7-6h34-r9j5: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote attackers to inject↗2022-05-14
▶
CVEList
CVE-2015-1653: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote attackers to inject↗2015-04-14
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday for April 2015: 11 Bulletins Released↗2015-04-14
▶
Talos
Microsoft Patch Tuesday for April 2015: 11 Bulletins Released↗2015-04-14
▶
CVE-2015-1653 — Cross-site Scripting in Microsoft | cvebase