Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-11775
HistoryOct 13, 2017 - 1:29 p.m.

CVE-2017-11775

2017-10-1313:29:00
CWE-79
[email protected]
web.nvd.nist.gov
51
cve-2017-11775
microsoft
sharepoint
enterprise server
xss
vulnerability
nvd
cross-site scripting
sp1
sp2016

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.3 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.4%

JSON

Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka “Microsoft Office SharePoint XSS Vulnerability”. This CVE ID is unique from CVE-2017-11777 and CVE-2017-11820.

VendorProductVersionCPE
microsoft corporationsharepoint_serverMicrosoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016cpe:2.3:a:microsoft corporation:sharepoint_server:Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016:*:*:*:*:*:*:*

Related

prion 3
cve 2
mskb 3
nessus 1
openvas 2
symantec 3
mscve 3
kaspersky 1
myhack58 1
threatpost 1
thn 1
trendmicroblog 1
talosblog 1
prion
prion
Cross site scripting
2017-10-13 13:29:00
Cross site scripting
2017-10-13 13:29:00
Cross site scripting
2017-10-13 13:29:00
cve
cve
CVE-2017-11777
2017-10-13 13:29:00
CVE-2017-11820
2017-10-13 13:29:00
mskb
mskb
Description of the security update for SharePoint Server 2013: October 10, 2017
2017-10-10 07:00:00
Description of the security update for SharePoint Enterprise Server 2016: October 10, 2017
2017-10-10 07:00:00
Description of the security update for SharePoint Foundation 2013: October 10, 2017
2017-10-10 07:00:00
nessus
nessus
Security Updates for Microsoft Sharepoint Server (October 2017)
2017-10-11 00:00:00
openvas
openvas
Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Multiple XSS Vulnerabilities (KB4011170)
2017-10-13 00:00:00
Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Elevation of Privilege Vulnerability (KB4011180)
2017-10-11 00:00:00
symantec
symantec
Microsoft SharePoint Server CVE-2017-11775 Cross Site Scripting Vulnerability
2017-10-10 00:00:00
Microsoft Office SharePoint CVE-2017-11820 Cross Site Scripting Vulnerability
2017-10-10 00:00:00
Microsoft SharePoint Server CVE-2017-11777 Cross Site Scripting Vulnerability
2017-10-10 00:00:00
mscve
mscve
Microsoft SharePoint Elevation of Privilege Vulnerability
2017-10-10 07:00:00
Microsoft SharePoint Elevation of Privilege Vulnerability
2017-10-10 07:00:00
Microsoft SharePoint Elevation of Privilege Vulnerability
2017-10-10 07:00:00
kaspersky
kaspersky
KLA11113 Multiple vulnerabilities in Microsoft Office
2017-10-10 00:00:00
myhack58
myhack58
Microsoft windows October release of the 62 flaws vulnerability bug patch, and repair of the National researchers submitted the 0-day flaw vulnerability bug-vulnerability warning-the black bar safety net
2017-10-12 00:00:00
threatpost
threatpost
Microsoft Patches Office Bug Actively Being Exploited
2017-10-10 16:44:08
thn
thn
Microsoft Issues Patches For Severe Flaws, Including Office Zero-Day & DNS Attack
2017-10-10 22:06:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of October 9, 2017
2017-10-13 14:03:59
talosblog
talosblog
Microsoft Patch Tuesday - October 2017
2017-10-10 13:25:00

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.3 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.4%

JSON
Related for CVE-2017-11775
prion3cve2mskb3nessus1openvas2symantec3mscve3kaspersky1myhack581threatpost1thn1trendmicroblog1talosblog1