Lucene search
HistoryJul 10, 2012 - 9:55 p.m.
CVE-2012-1863
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.839
Percentile
98.5%
Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka “SharePoint Reflected List Parameter Vulnerability.”
Affected configurations
Node
microsoftoffice_sharepoint_serverMatch2007sp2x32
ORmicrosoftoffice_sharepoint_serverMatch2007sp2x64
ORmicrosoftoffice_sharepoint_serverMatch2007sp3x32
ORmicrosoftoffice_sharepoint_serverMatch2007sp3x64
ORmicrosoftsharepoint_foundationMatch2010
ORmicrosoftsharepoint_foundationMatch2010sp1
ORmicrosoftsharepoint_serverMatch2007sp2
ORmicrosoftsharepoint_serverMatch2007sp3
ORmicrosoftsharepoint_servicesMatch3.0sp2x32
ORmicrosoftsharepoint_servicesMatch3.0sp2x64
Related
checkpoint_advisories
checkpoint_advisories
symantec
symantec
Microsoft SharePoint CVE-2012-1863 Cross Site Scripting Vulnerability
2012-07-10 00:00:00
cvelist
cvelist
CVE-2012-1863
2012-07-10 21:00:00
seebug
seebug
Microsoft SharePoint 跨站脚本漏洞(CVE-2012-1863)
2012-07-11 00:00:00
prion
prion
Cross site scripting
2012-07-10 21:55:00
cve
cve
CVE-2012-1863
2012-07-10 21:55:06
threatpost
threatpost
Serious Remote PHP Bug Accidentally Disclosed
2012-05-03 14:09:27
PHP Group Releases New Versions, But Patch Doesn't Fix CVE-2012-1823 Bug
2012-05-04 14:26:46
Another Set of PHP Releases Pushed Out to Fix CVE-2012-1823 Flaw
2012-05-09 14:32:23
nessus
nessus
openvas
openvas
Microsoft SharePoint Multiple Privilege Elevation Vulnerabilities (2695502)
2012-07-11 00:00:00
mskb
mskb
securityvulns
securityvulns
Microsoft Sharepoint multiple security vulnerabilities
2012-07-11 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.839
Percentile
98.5%
Related for NVD:CVE-2012-1863