Vulnerability Database

299,879

Total vulnerabilities in the database

CVE-2015-2420

Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS Vulnerability."

  • Published: Aug 15, 2015
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-2420
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
microsoft / system_center_operations_manager 2012-rollup6 2012-rollup6.x
microsoft / system_center_operations_manager 2012-rollup5 2012-rollup5.x
microsoft / system_center_operations_manager 2012-rollup4 2012-rollup4.x
microsoft / system_center_operations_manager 2012-rollup3 2012-rollup3.x
microsoft / system_center_operations_manager 2012-rollup2 2012-rollup2.x
microsoft / system_center_operations_manager 2012-rollup1 2012-rollup1.x
microsoft / system_center_operations_manager 2012-rollup7 2012-rollup7.x
microsoft / system_center_operations_manager 2012-sp1_rollup8 2012-sp1_rollup8.x
microsoft / system_center_operations_manager 2012-sp1_rollup7 2012-sp1_rollup7.x
microsoft / system_center_operations_manager 2012-sp1_rollup6 2012-sp1_rollup6.x
microsoft / system_center_operations_manager 2012-sp1_rollup5 2012-sp1_rollup5.x
microsoft / system_center_operations_manager 2012-sp1_rollup4 2012-sp1_rollup4.x
microsoft / system_center_operations_manager 2012-sp1_rollup3 2012-sp1_rollup3.x
microsoft / system_center_operations_manager 2012-sp1_rollup2 2012-sp1_rollup2.x
microsoft / system_center_operations_manager 2012-sp1_rollup1 2012-sp1_rollup1.x
microsoft / system_center_operations_manager 2012-sp1_rollup9 2012-sp1_rollup9.x
microsoft / system_center_operations_manager 2012-r2_rollup6 2012-r2_rollup6.x
microsoft / system_center_operations_manager 2012-r2_rollup5 2012-r2_rollup5.x
microsoft / system_center_operations_manager 2012-r2_rollup4 2012-r2_rollup4.x
microsoft / system_center_operations_manager 2012-r2_rollup3 2012-r2_rollup3.x
microsoft / system_center_operations_manager 2012-r2_rollup2 2012-r2_rollup2.x
microsoft / system_center_operations_manager 2012-r2_rollup1 2012-r2_rollup1.x