CVEvulnerability
CVE-2016-7251
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-11-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "MDS API XSS Vulnerability."
Affected configurations
• microsoft sql server 2016
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/94043 www.securityfocus.com
- http://www.securitytracker.com/id/1037250 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-136 docs.microsoft.com
- http://www.securityfocus.com/bid/94043 www.securityfocus.com
- http://www.securitytracker.com/id/1037250 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-136 docs.microsoft.com