CVE-2016-7251

Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script or HTML via an…

published November 10, 2016

CVSS
—
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "MDS API XSS Vulnerability."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08190 · 94.8th percentile
Published
2016-11-10T06:16Z
EPSS history
Timeline
  • 10 NOV 06:16Z
    Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script or HTML via an…
    cvelistv5