Lucene search

K
cve[email protected]CVE-2010-0817
HistoryApr 29, 2010 - 9:30 p.m.

CVE-2010-0817

2010-04-2921:30:00
CWE-79
web.nvd.nist.gov
33
cve-2010-0817
xss
vulnerability
microsoft
sharepoint
server
2007
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.845 High

EPSS

Percentile

98.5%

Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter.

Affected configurations

NVD
Node
microsoftsharepoint_serverMatch2007
Node
microsoftsharepoint_servicesMatch3.0sp1x32
OR
microsoftsharepoint_servicesMatch3.0sp1x64
OR
microsoftsharepoint_servicesMatch3.0sp2x32
OR
microsoftsharepoint_servicesMatch3.0sp2x64

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.845 High

EPSS

Percentile

98.5%