Vulnerability Details CVE-2015-6039
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content in an Office Marketplace instance, aka "Microsoft SharePoint Security Feature Bypass Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.09
EPSS Ranking 92.2%
CVSS Severity
CVSS v2 Score 3.5
References
Products affected by CVE-2015-6039
-
cpe:2.3:a:microsoft:sharepoint_foundation:2013
-
cpe:2.3:a:microsoft:sharepoint_server:2013