Microsoft Active Directory Federation Services XSS Elevation Of Privilege Vulnerability (CVE-2015-1757)
Publish date: 05 de octubre de 2016
Gravedad: High
Identificadores de CVE : 2015-1757,MS15-062
Descripción
Cross-site scripting (XSS) vulnerability in Microsoft Active Directory Federation Services allows remote attackers to inject arbitrary web script or HTML via a crafted request.
Revelación de la información
Apply associated Trend Micro DPI Rules.
Soluciones
Trend Micro Deep Security DPI Rule Number: 1000552
Trend Micro Deep Security DPI Rule Name: 1000552 - Generic Cross Site Scripting(XSS) Prevention
Software y versión afectados
- Active Directory Federation Services