CVSS: 6.1EPSS: 9%CPEs: 2EXPL: 0CVE-2015-1640
https://notcve.org/view.php?id=CVE-2015-1640
14 Apr 2015 — Cross-site scripting (XSS) vulnerability in Microsoft Project Server 2010 SP2 and 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability." Vulnerabilidad de XSS en Microsoft Project Server 2010 SP2 y 2013 SP1 permite a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través de una solicitud manipulada, también conocido como 'vulnerabilidad de XSS en Microsoft SharePoint.' • http://www.securitytracker.com/id/1032111 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.0EPSS: 15%CPEs: 24EXPL: 0CVE-2014-0251
https://notcve.org/view.php?id=CVE-2014-0251
14 May 2014 — Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 Gold and SP1; Web Applications 2010 SP1 and SP2; Office Web Apps Server 2013 Gold and SP1; SharePoint Server 2013 Client Components SDK; and SharePoint Designer 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1 allow remote authenticated users to execute arbitrary code via crafted page conten... • http://www.securitytracker.com/id/1030227 • CWE-94: Improper Control of Generation of Code ('Code Injection') •