Lucene search
HistorySep 15, 2011 - 12:26 p.m.
CVE-2011-1890
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.214
Percentile
96.5%
Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via a post, aka “Editform Script Injection Vulnerability.”
Affected configurations
Node
microsoftsharepoint_foundationMatch2010
ORmicrosoftsharepoint_serverMatch2010
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | sharepoint_foundation | 2010 | cpe:2.3:a:microsoft:sharepoint_foundation:2010:*:*:*:*:*:*:* |
| microsoft | sharepoint_server | 2010 | cpe:2.3:a:microsoft:sharepoint_server:2010:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2011-1890
2011-09-15 10:00:00
symantec
symantec
checkpoint_advisories
checkpoint_advisories
cve
cve
CVE-2011-1890
2011-09-15 12:26:48
prion
prion
Cross site scripting
2011-09-15 12:26:00
mskb
mskb
securityvulns
securityvulns
Microsoft Sharepoint multiple security vulnerabilities
2011-09-20 00:00:00
openvas
openvas
Microsoft SharePoint Multiple Privilege Escalation Vulnerabilities (2451858)
2011-09-14 00:00:00
Microsoft SharePoint Multiple Privilege Escalation Vulnerabilities (2451858)
2011-09-14 00:00:00
nessus
nessus
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.214
Percentile
96.5%
Related for NVD:CVE-2011-1890