Summary
This host is missing an important security update according to Microsoft Bulletin MS13-035.
Impact
Successful exploitation could allow an attacker to bypass certain security restrictions and conduct cross-site scripting and spoofing attacks.
Impact Level: Application
Solution
Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms13-035
Insight
Certain unspecified input is not properly sanitized within the HTML Sanitation component before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
Affected
Microsoft Groove Server 2010 Service Pack 1
References
Severity
Classification
-
CVE CVE-2013-1289 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities
- Microsoft Windows Kernel Privilege Elevation Vulnerabilities (2813170)
- Microsoft Exchange and Windows SMTP Service Denial of Service Vulnerability (981832)
- Microsoft SharePoint Server Remote Code Execution Vulnerability (2904244)
- Microsoft Exchange Server Multiple Vulnerabilities (3009712)
- Microsoft Lync Server Information Disclosure Vulnerability (2969258)