Microsoft Windows Admin Center Cross-Site Scripting Vulnerability Allowing Spoofing

A cross-site scripting vulnerability has been identified in Windows Admin Center. This issue arises from improper input neutralization during web page generation, allowing an unauthorized attacker to perform spoofing over the network. The vulnerability affects Windows Admin Center versions prior to 2.6.5.16.

Impact

Successful exploitation allows an attacker to spoof users over the network. Additionally, according to CVSS, the vulnerability could lead to some loss of confidentiality and integrity, but no impact on availability.

Remediation

Users can download the security update for Windows Admin Center from the Microsoft Update Catalog. For more information, see the release notes on the Microsoft Learn website.