Cross site scripting

2012-07-1021:55:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.862 High

EPSS

Percentile

98.5%

JSON

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka “SharePoint Script in Username Vulnerability.”

CPENameOperatorVersion
office_web_appseq2010
office_web_appseq2010 sp1
sharepoint_foundationeq2010
sharepoint_foundationeq2010 sp1
sharepoint_servereq2010 sp1
sharepoint_servereq2010

Name	Operator	Version
office_web_apps	eq	2010
office_web_apps	eq	2010 sp1
sharepoint_foundation	eq	2010
sharepoint_foundation	eq	2010 sp1
sharepoint_server	eq	2010 sp1
sharepoint_server	eq	2010