Security Advisory
CVE-2016-7251
6.1
MEDIUM
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "MDS API XSS Vulnerability."
Published Date
November 10, 2016
Official Source
NIST NVD Advisory