NVD

Id
24580  
Name
CVE-2015-2556  
Description
The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "Microsoft SharePoint Information Disclosure Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-10-13  
Modified Date
2016-12-12  
Seq
2015-2556  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
129545 24580 CVE-2015-2556 MS15-110  View
129546 24580 CVE-2015-2556 1033804  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9889 JVNDB-2015-005209 Microsoft SharePoint Server 2007 および 2010 の InfoPath Forms Services コンポーネントにおける任意のファイルを読まれる脆弱性 Microsoft SharePoint Server 2007 および 2010 の InfoPath Forms Services コンポーネントは、ドキュメント型定義 (DTD) を不適切に処理するため、任意のファイルを読まれる脆弱性が存在します。 CVE-2015-2556 79781 CVE-2015-2556 24580 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005209.html 2015-10-13 2015-10-15 View