Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2015-6117
HistoryJan 13, 2016 - 5:59 a.m.

CVE-2015-6117

2016-01-1305:59:00
CWE-79
microsoft
web.nvd.nist.gov
45
cve-2015-6117
microsoft
sharepoint
server 2013
sp1
sharepoint foundation 2013
xss
access control
security
bypass

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

5.3

Confidence

High

EPSS

0.007

Percentile

81.1%

JSON

Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka “Microsoft SharePoint Security Feature Bypass,” a different vulnerability than CVE-2016-0011.

Affected configurations

Nvd
Node
microsoftsharepoint_foundationMatch2013sp1
OR
microsoftsharepoint_serverMatch2013sp1
VendorProductVersionCPE
microsoftsharepoint_foundation2013cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
microsoftsharepoint_server2013cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*

Related

cve 1
cvelist 2
nvd 2
prion 2
openvas 1
symantec 2
nessus 1
kaspersky 1
mskb 1
cve
cve
CVE-2016-0011
2016-01-13 05:59:09
cvelist
cvelist
CVE-2016-0011
2016-01-13 02:00:00
CVE-2015-6117
2016-01-13 02:00:00
nvd
nvd
CVE-2015-6117
2016-01-13 05:59:00
CVE-2016-0011
2016-01-13 05:59:09
prion
prion
Security feature bypass
2016-01-13 05:59:00
Security feature bypass
2016-01-13 05:59:00
openvas
openvas
Microsoft SharePoint Server and Foundation Multiple Vulnerabilities (3124585)
2016-01-13 00:00:00
symantec
symantec
Microsoft SharePoint CVE-2015-6117 Security Bypass Vulnerability
2016-01-12 00:00:00
Microsoft SharePoint CVE-2016-0011 Security Bypass Vulnerability
2016-01-12 00:00:00
nessus
nessus
MS16-004: Security Update for Microsoft Office to Address Remote Code Execution (3124585)
2016-01-12 00:00:00
kaspersky
kaspersky
KLA10738 Multiple vulnerabilities in Microsoft Office
2016-01-12 00:00:00
mskb
mskb
MS16-004: Security Update for Microsoft Office to Address Remote Code Execution: January 12, 2016
2016-01-12 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

5.3

Confidence

High

EPSS

0.007

Percentile

81.1%

JSON
Related for CVE-2015-6117
cve1cvelist2nvd2prion2openvas1symantec2nessus1kaspersky1mskb1