CVE-2012-1859

Published: Jul 10, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "XSS scriptresx.ashx Vulnerability."

Affected (6)

Products: Microsoft: Office Web Apps, Sharepoint Foundation, Sharepoint Server

Microsoft

3 products

Office Web Apps

Sharepoint Foundation

Sharepoint Server

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office Web Apps	Version 2010
Microsoft Office Web Apps	Version 2010 sp1
Microsoft Sharepoint Foundation	Version 2010
Microsoft Sharepoint Foundation	Version 2010 sp1
Microsoft Sharepoint Server	Version 2010
Microsoft Sharepoint Server	Version 2010 sp1