CVE-2015-2420
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS Vulnerability."
Vulnerabilidad de XSS en Microsoft System Center 2012 Operations Manager Gold en versiones anteriores a Rollup 8, SP1 en versiones anteriores a Rollup 10 y R2 en versiones anteriores a Rollup 7, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocido como 'System Center Operations Manager Web Console XSS Vulnerability.'
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-03-19 CVE Reserved
- 2015-08-15 CVE Published
- 2024-08-06 CVE Updated
- 2024-09-08 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id/1033245 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-086 | 2018-11-20 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | r2_rollup1 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | r2_rollup2 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | r2_rollup3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | r2_rollup4 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | r2_rollup5 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | r2_rollup6 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | rollup1 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | rollup2 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | rollup3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | rollup4 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | rollup5 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | rollup6 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | rollup7 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | sp1_rollup1 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | sp1_rollup2 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | sp1_rollup3 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | sp1_rollup4 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | sp1_rollup5 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | sp1_rollup6 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | sp1_rollup7 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | sp1_rollup8 |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | System Center Operations Manager Search vendor "Microsoft" for product "System Center Operations Manager" | 2012 Search vendor "Microsoft" for product "System Center Operations Manager" and version "2012" | sp1_rollup9 |
Affected
| ||||||