CVE-2018-8426

Published: Sep 13, 2018Modified: Nov 21, 2024

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint.

Affected (3)

Products: Microsoft: Sharepoint Enterprise Server 2013, Sharepoint Enterprise Server 2016, Sharepoint Server 2010

Microsoft

3 products

Sharepoint Enterprise Server 2013

Sharepoint Enterprise Server 2016

Sharepoint Server 2010

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Sharepoint Enterprise Server 2013	All versions
Microsoft Sharepoint Enterprise Server 2016	All versions
Microsoft Sharepoint Server 2010	All versions