Логотип exploitDog
bind:CVE-2015-2556
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2015-2556

Количество 3

Количество 3

nvd логотип

CVE-2015-2556

больше 10 лет назад

The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "Microsoft SharePoint Information Disclosure Vulnerability."

CVSS2: 4.3
EPSS: Средний
github логотип

GHSA-c758-mgr5-grgx

больше 3 лет назад

The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "Microsoft SharePoint Information Disclosure Vulnerability."

EPSS: Средний
fstec логотип

BDU:2015-11692

больше 10 лет назад

Уязвимость пакета корпоративных приложений Microsoft SharePoint Server, позволяющая нарушителю читать произвольные файлы

CVSS2: 4.3
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2015-2556

The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "Microsoft SharePoint Information Disclosure Vulnerability."

CVSS2: 4.3
30%
Средний
больше 10 лет назад
github логотип
GHSA-c758-mgr5-grgx

The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "Microsoft SharePoint Information Disclosure Vulnerability."

30%
Средний
больше 3 лет назад
fstec логотип
BDU:2015-11692

Уязвимость пакета корпоративных приложений Microsoft SharePoint Server, позволяющая нарушителю читать произвольные файлы

CVSS2: 4.3
30%
Средний
больше 10 лет назад

Уязвимостей на страницу