Cross-Site Scripting Vulnerability in Microsoft Project Server
CVE-2015-1640

Currently unrated

Key Information:

Vendor
Microsoft
Status
Project Server
Vendor
CVE Published:
14 April 2015

Summary

A cross-site scripting vulnerability in Microsoft Project Server versions 2010 SP2 and 2013 SP1 allows remote attackers to execute arbitrary web scripts or HTML through specially crafted requests. This vulnerability, associated with Microsoft SharePoint, can lead to unauthorized actions being performed on behalf of the user, potentially compromising sensitive data and user accounts. Organizations using affected versions are advised to apply vendor-recommended updates and follow best security practices to mitigate risks.

References

http://www.securitytracker.com/id/1032111
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

9% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.