Vulnerabilities > Microsoft > Systems Management Server > Medium

DATE CVE VULNERABILITY TITLE RISK
2012-09-11 CVE-2012-2536 Cross-Site Scripting vulnerability in Microsoft products
Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."
network
microsoft CWE-79
4.3
2004-07-27 CVE-2004-0728 Denial-Of-Service vulnerability in Systems Management Server 1.2/2.0/2.50.2726
The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address.
network
low complexity
microsoft
5.0