Code injection vulnerability in Microsoft Sharepoint

Description

An XSS vulnerabilities were found in Microsoft Sharepoint. By exploiting these vulnerabilities malicious users can inject arbitrary scripts. These vulnerabilities can be exploited remotely via a specially designed request.

Original advisories

• MS15-036

• CVE-2015-1653
• CVE-2015-1640

Related products

• Microsoft-Sharepoint-Server

CVE list

• CVE-2015-1653
  warning
• CVE-2015-1640
  warning

KB list

• 2965219
• 2965302
• 2965278

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com