XSS in Microsoft Office

CVE-2015-1639

Cross-site scripting (XSS) vulnerability in Microsoft Office for Mac 2011 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Outlook App for Mac XSS Vulnerability."

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.094 (94.9th percentile) — read the EPSS interpretation.

Affected products

Microsoft Office — versions 2011
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
secure@microsoft.com (x_refsource_MS, vendor-advisory)