Unrated severityNVD Advisory· Published Aug 15, 2015· Updated May 6, 2026
CVE-2015-2420
CVE-2015-2420
Description
Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and R2 before Rollup 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "System Center Operations Manager Web Console XSS Vulnerability."
Affected products
22cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup7:*:*:*:*:*:*+ 21 more
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup7:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup8:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup9:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup4:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup5:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2_rollup6:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup4:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup5:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup6:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:rollup7:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup4:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup5:*:*:*:*:*:*
- cpe:2.3:a:microsoft:system_center_operations_manager:2012:sp1_rollup6:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-086nvdPatchVendor Advisory
- www.securitytracker.com/id/1033245nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.