CVE-2012-1863

Published: Jul 10, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability."

Affected (10)

Products: Microsoft: Office Sharepoint Server, Sharepoint Foundation, Sharepoint Server, Sharepoint Services

Microsoft

4 products

Office Sharepoint Server

Sharepoint Foundation

Sharepoint Server

Sharepoint Services

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office Sharepoint Server	Version 2007 sp2
Microsoft Office Sharepoint Server	Version 2007 sp2
Microsoft Office Sharepoint Server	Version 2007 sp3
Microsoft Office Sharepoint Server	Version 2007 sp3
Microsoft Sharepoint Foundation	Version 2010
Microsoft Sharepoint Foundation	Version 2010 sp1
Microsoft Sharepoint Server	Version 2007 sp2
Microsoft Sharepoint Server	Version 2007 sp3
Microsoft Sharepoint Services	Version 3.0 sp2
Microsoft Sharepoint Services	Version 3.0 sp2