AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2015-6037

LOW · CVSS 3.5 EPSS 8.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-10-14 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 3.5. It affects Microsoft, SharePoint, Office. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.

CVE
CVE-2015-6037
Severity
LOW
CVSS
3.5
EPSS
8.47%
Microsoft SharePoint Office

Original NVD Description

Cross-site scripting (XSS) vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1, and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka "Microsoft Office Web Apps XSS Spoofing Vulnerability."