CVE-2015-2420

MEDIO 4.3CVE-2015-2420 · Published 15/08/2015 · updated 17/06/2026

In breve

CVE-2015-2420 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda system center operations manager (microsoft).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 8.8%, superiore al 95.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
system center operations manager microsoft	`= 2012`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS Vulnerability."

References

securitytracker.com/id/1033245 · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-086 · Patch

Altre vulnerabilità di system center operations manager

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free