CVE-2015-1639

Cross-site scripting (XSS) vulnerability in Microsoft Office for Mac 2011 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Outlook App for Mac XSS Vulnerability."

Score

CVSS 2.0 4.3 Medium

Status

Modified - secure@microsoft.com

Published

2015-04-14

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Office (Microsoft)

References

• http://www.securitytracker.com/id/1032104
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033