CVE-2012-1862

2012-07-1021:55:05

CWE-20

[email protected]

web.nvd.nist.gov

cve-2012-1862

open redirect vulnerability

microsoft office sharepoint server

remote attackers

phishing attacks

crafted url

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.007

Percentile

80.9%

JSON

Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka “SharePoint URL Redirection Vulnerability.”

Affected configurations

NVD

Node

microsoftsharepoint_serverMatch2007sp2

microsoftsharepoint_serverMatch2007sp3

VendorProductVersionCPE
microsoftsharepoint_server2007cpe:/a:microsoft:sharepoint_server:2007:sp3::
microsoftsharepoint_server2007cpe:/a:microsoft:sharepoint_server:2007:sp2::

Vendor	Product	Version	CPE
microsoft	sharepoint_server	2007	cpe:/a:microsoft:sharepoint_server:2007:sp3::
microsoft	sharepoint_server	2007	cpe:/a:microsoft:sharepoint_server:2007:sp2::