CVE-2015-6039

LOW 3.5CVE-2015-6039 · Published 14/10/2015 · updated 17/06/2026

In short

CVE-2015-6039 is a LOW (CVSS 3.5) vulnerability affecting sharepoint foundation (microsoft), sharepoint server (microsoft).
Chance of exploitation in the next 30 days (EPSS): 9.1%, higher than 95.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sharepoint foundation microsoft	`= 2013`	No fix yet
sharepoint server microsoft	`= 2013`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content in an Office Marketplace instance, aka "Microsoft SharePoint Security Feature Bypass Vulnerability."

References

securitytracker.com/id/1033804 · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-110

More vulnerabilities in sharepoint foundation

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free