Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:web_customizations:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWeb Customizations (c9d6cd2a-aaa9-57b4-8da7-86a0876e6765)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/microsoft/adfswebcustomization purl2cpe 2026-06-01 10:17:07.334201

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-8326 vulnerable 2026-06-08 05:12:05.646745 Details available
A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Open Source Customization for Active Directory Federation Services XSS Vulnerability." This affects Web Customizations.
Published: 2018-07-11T00:00:00.000Z
Updated: 2024-08-05T06:54:35.265Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.