Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka "Microsoft SharePoint XSS Vulnerability".
CVSS Details
- CVSS 3.0 Base Score: 5.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Msft | — | Security Update for Microsoft SharePoint Foundation 2013 (KB3162054) farm-deploymentSecurity Update for Microsoft SharePoint Enterprise Server 2013 (KB3172532) farm-deploymentSecurity Update for Microsoft SharePoint Enterprise Server 2013 (KB3172482)Security Update for Microsoft SharePoint Foundation 2013 (KB3162054)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3178638)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3191886)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3172475)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3178633)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3178633) farm-deploymentSecurity Update for Microsoft SharePoint Enterprise Server 2013 (KB3162069)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3178638) farm-deploymentSecurity Update for Microsoft SharePoint Enterprise Server 2013 (KB3162068) farm-deploymentSecurity Update for Microsoft SharePoint Enterprise Server 2013 (KB3172482) farm-deploymentSecurity Update for Microsoft SharePoint Foundation 2013 (KB3191914)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3172536)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3172532)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3191886) farm-deploymentSecurity Update for Microsoft SharePoint Enterprise Server 2013 (KB3162068)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3162069) farm-deploymentSecurity Update for Microsoft SharePoint Foundation 2013 (KB3191914) farm-deploymentSecurity Update for Microsoft SharePoint Enterprise Server 2013 (KB3172536) farm-deployment | May 9, 2017 | May 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub