CVE-2013-1289

Published: Apr 9, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."

Affected (6)

Products: Microsoft: Groove Server, Infopath, Office Web Apps, Sharepoint Foundation, Sharepoint Server

5 products

Sharepoint Foundation

Sharepoint Server

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microsoft Groove Server	Version 2010 sp1
Microsoft Infopath	Version 2010 sp1
Microsoft Infopath	Version 2010 sp1
Microsoft Office Web Apps	Version 2010 sp1
Microsoft Sharepoint Foundation	Version 2010 sp1
Microsoft Sharepoint Server	Version 2010 sp1