CVE-2018-8652: Microsoft Windows Azure Pack Rollup

Medium severity, CVSS 5.4. EPSS: 1.5% chance of exploitation in the next 30 days.

A Cross-site Scripting (XSS) vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1.

Affected products

• Microsoft Windows Azure Pack Rollup: version 13.1 only

Published 2018-12-12. Last modified 2026-06-17.