Unrated severityNVD Advisory· Published Aug 15, 2015· Updated Jun 17, 2026
CVE-2015-2420
CVE-2015-2420
Description
Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS Vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
23cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup1:*:*:*:*:*:*+ 22 more
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup4:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup5:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup6:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup4:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup5:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup6:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup7:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup4:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup5:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup6:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup7:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup8:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup9:*:*:*:*:*:*
- (no CPE)range: < Rollup 8 (Gold) / < Rollup 10 (SP1) / < Rollup 7 (R2)
Patches
Vulnerability mechanics
References
2- docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-086nvdPatchVendor Advisory
- www.securitytracker.com/id/1033245nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.