Microsoft Active Directory Federation Services XSS Elevation Of Privilege Vulnerability (CVE-2015-1757)
Publish Date: 05 ottobre 2016
Gravità: : Alto
Identificatori CVE: 2015-1757,MS15-062
Descrizione
Cross-site scripting (XSS) vulnerability in Microsoft Active Directory Federation Services allows remote attackers to inject arbitrary web script or HTML via a crafted request.
Informazioni esposizione:
Apply associated Trend Micro DPI Rules.
Soluzioni
Trend Micro Deep Security DPI Rule Number: 1000552
Trend Micro Deep Security DPI Rule Name: 1000552 - Generic Cross Site Scripting(XSS) Prevention
Software e versione interessati:
- Active Directory Federation Services