CVE-2015-1633: XSS
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Foundation 2013 Gold and SP1, and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1633?
CVE-2015-1633 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2015-1633?
To mitigate CVE-2015-1633, it is recommended to apply the latest security updates provided by Microsoft for affected SharePoint products.
Who is affected by CVE-2015-1633?
CVE-2015-1633 affects remote authenticated users of Microsoft SharePoint Foundation and SharePoint Server versions specified in the vulnerability description.
What type of vulnerability is CVE-2015-1633?
CVE-2015-1633 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious web scripts or HTML.
What versions of SharePoint are vulnerable to CVE-2015-1633?
The vulnerable versions include Microsoft SharePoint Foundation 2010 SP2, 2013 (Gold and SP1) and Microsoft SharePoint Server 2010 SP2, 2013 (Gold and SP1).