Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2018-8498
HistoryOct 10, 2018 - 1:29 p.m.

CVE-2018-8498

2018-10-1013:29:00
CWE-79
[email protected]
web.nvd.nist.gov
36
cve-2018-8498
microsoft sharepoint
elevation of privilege
nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.6 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.6%

JSON

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka “Microsoft SharePoint Elevation of Privilege Vulnerability.” This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8480, CVE-2018-8488, CVE-2018-8518.

VendorProductVersionCPE
microsoftsharepoint_services*cpe:2.3:a:microsoft:sharepoint_services:*:*:*:*:*:*:*:*
microsoftsharepoint_services*cpe:2.3:a:microsoft:sharepoint_services:*:*:*:*:*:*:*:*

Related

prion 4
mskb 2
cve 3
nessus 3
symantec 4
mscve 4
kaspersky 1
talosblog 1
openvas 2
prion
prion
Privilege escalation
2018-10-10 13:29:00
Privilege escalation
2018-10-10 13:29:00
Privilege escalation
2018-10-10 13:29:00
mskb
mskb
Description of the security update for SharePoint Enterprise Server 2013: October 9, 2018
2018-10-09 07:00:00
Description of the security update for SharePoint Enterprise Server 2016: October 9, 2018
2018-10-09 07:00:00
cve
cve
CVE-2018-8518
2018-10-10 13:29:00
CVE-2018-8480
2018-10-10 13:29:00
CVE-2018-8488
2018-10-10 13:29:00
nessus
nessus
Security Updates for Microsoft SharePoint Server (October 2018)
2018-10-09 00:00:00
SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2022:0183-1)
2022-01-26 00:00:00
SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2022:0142-1)
2022-01-21 00:00:00
symantec
symantec
Microsoft SharePoint Server CVE-2018-8498 Remote Privilege Escalation Vulnerability
2018-10-09 00:00:00
Microsoft SharePoint Server CVE-2018-8518 Remote Privilege Escalation Vulnerability
2018-10-09 00:00:00
Microsoft SharePoint Server CVE-2018-8488 Remote Privilege Escalation Vulnerability
2018-10-09 00:00:00
mscve
mscve
Microsoft SharePoint Elevation of Privilege Vulnerability
2018-10-09 07:00:00
Microsoft SharePoint Elevation of Privilege Vulnerability
2018-10-09 07:00:00
Microsoft SharePoint Elevation of Privilege Vulnerability
2018-10-09 07:00:00
kaspersky
kaspersky
KLA11334 Multiple vulnerabilities in Microsoft Office
2018-10-09 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday — October 18: Vulnerability disclosures and Snort coverage
2018-10-09 11:38:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:0183-1)
2022-01-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0142-1)
2022-01-21 00:00:00

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.6 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.6%

JSON
Related for CVE-2018-8498
prion4mskb2cve3nessus3symantec4mscve4kaspersky1talosblog1openvas2