Lucene search

[email protected]NVD:CVE-2010-1257

HistoryJun 08, 2010 - 8:30 p.m.

CVE-2010-1257

2010-06-0820:30:02

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.712

Percentile

98.1%

JSON

Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject arbitrary web script or HTML via vectors related to sanitization.

Affected configurations

Nvd

Node

microsoftoffice_infopathMatch2003sp3

microsoftoffice_infopathMatch2007sp1

microsoftoffice_infopathMatch2007sp2

Node

microsoftsharepoint_serverMatch2007sp1x32

microsoftsharepoint_serverMatch2007sp1x64

microsoftsharepoint_serverMatch2007sp2x32

microsoftsharepoint_serverMatch2007sp2x64

Node

microsoftsharepoint_servicesMatch3.0sp1x32

microsoftsharepoint_servicesMatch3.0sp1x64

microsoftsharepoint_servicesMatch3.0sp2x32

microsoftsharepoint_servicesMatch3.0sp2x64

Node

microsoftinternet_explorerMatch8

AND

microsoftwindows_2003_serversp2

microsoftwindows_2003_serversp2x64

microsoftwindows_7Match-

microsoftwindows_server_2008x32

microsoftwindows_server_2008x64

microsoftwindows_server_2008sp2x32

microsoftwindows_server_2008sp2x64

microsoftwindows_server_2008Matchr2itanium

microsoftwindows_server_2008Matchr2x64

microsoftwindows_vistasp1

microsoftwindows_vistasp2

microsoftwindows_vistaMatch-sp1

microsoftwindows_vistaMatch-sp2

microsoftwindows_xpsp2

microsoftwindows_xpsp3

microsoftwindows_xpMatch-sp2x64

VendorProductVersionCPE
microsoftoffice_infopath2003cpe:2.3:a:microsoft:office_infopath:2003:sp3:*:*:*:*:*:*
microsoftoffice_infopath2007cpe:2.3:a:microsoft:office_infopath:2007:sp1:*:*:*:*:*:*
microsoftoffice_infopath2007cpe:2.3:a:microsoft:office_infopath:2007:sp2:*:*:*:*:*:*
microsoftsharepoint_server2007cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:x32:*:*:*:*:*
microsoftsharepoint_server2007cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:x64:*:*:*:*:*
microsoftsharepoint_server2007cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x32:*:*:*:*:*
microsoftsharepoint_server2007cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x64:*:*:*:*:*
microsoftsharepoint_services3.0cpe:2.3:a:microsoft:sharepoint_services:3.0:sp1:x32:*:*:*:*:*
microsoftsharepoint_services3.0cpe:2.3:a:microsoft:sharepoint_services:3.0:sp1:x64:*:*:*:*:*
microsoftsharepoint_services3.0cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x32:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	office_infopath	2003	cpe:2.3:a:microsoft:office_infopath:2003:sp3::::::
microsoft	office_infopath	2007	cpe:2.3:a:microsoft:office_infopath:2007:sp1::::::
microsoft	office_infopath	2007	cpe:2.3:a:microsoft:office_infopath:2007:sp2::::::
microsoft	sharepoint_server	2007	cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:x32:::::*
microsoft	sharepoint_server	2007	cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:x64:::::*
microsoft	sharepoint_server	2007	cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x32:::::*
microsoft	sharepoint_server	2007	cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x64:::::*
microsoft	sharepoint_services	3.0	cpe:2.3:a:microsoft:sharepoint_services:3.0:sp1:x32:::::*
microsoft	sharepoint_services	3.0	cpe:2.3:a:microsoft:sharepoint_services:3.0:sp1:x64:::::*
microsoft	sharepoint_services	3.0	cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x32:::::*