CVE-2018-8652

中危 5.4CVE-2018-8652 · Published 12/12/2018 · updated 17/06/2026

要点

CVE-2018-8652 是影响 windows azure pack rollup (microsoft) 的中危 (CVSS 5.4)漏洞。
未来 30 天内被利用的概率（EPSS）：1.5%，高于 74.5% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
windows azure pack rollup microsoft	`= 13.1`	No fix yet

Description

A Cross-site Scripting (XSS) vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1.

References

securityfocus.com/bid/106155 · Third Party Advisory
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8652 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free