XSS in Microsoft Visual Studio Team Foundation Server
CVE-2012-1892
Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "XSS Vulnerability."
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.165 (96.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Visual_studio_team_foundation_server — versions 2010
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (x_refsource_SECUNIA, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_BID)