ID de Prueba:	1.3.6.1.4.1.25623.1.0.901227
Categoría:	Windows : Microsoft Bulletins
Título:	Microsoft VS Team Foundation Server SignalR XSS Vulnerability (2905244)
Resumen:	This host is missing an important security update according to Microsoft; Bulletin MS13-103.
Descripción:	Summary: This host is missing an important security update according to Microsoft Bulletin MS13-103. Vulnerability Insight: Flaw is due ASP.NET SignalR improperly encodes user input before returning it to the user. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary script code in a user's browser within the trust relationship between their browser and the server. Affected Software/OS: Microsoft Visual Studio Team Foundati on Microsoft Windows Server 2013. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-5042 Microsoft Security Bulletin: MS13-103 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-103 http://www.securitytracker.com/id/1029463
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.