Lucene search
RootSSV:60277HistoryJul 11, 2012 - 12:00 a.m.
Microsoft SharePoint 跨站脚本漏洞(CVE-2012-1863)
2012-07-1100:00:00
Root
www.seebug.org
17
0.934 High
EPSS
Percentile
98.9%
Bugtraq ID:54316
CVE ID:CVE-2012-1863
Microsoft SharePoint Server是一款服务器功能集成套件，提供全面的内容管理和企业搜索、加速共享业务流程并便利跨界限信息共享。
Microsoft SharePoint Server存在一个跨站脚本漏洞，允许攻击者通过URL中特制的JavaScript元素，注入任意WEB脚本或HTML，攻击者可以利用漏洞获得敏感信息或劫持用户会话。
0
Microsoft SharePoint Foundation 2010 SP1
Microsoft SharePoint Foundation 2010
Microsoft InfoPath 2010
Microsoft InfoPath 2007 SP2
Microsoft InfoPath 2007
厂商解决方案
用户可参考如下供应商提供的安全公告获得补丁信息：
http://technet.microsoft.com/security/bulletin/MS12-050
Related
checkpoint_advisories
checkpoint_advisories
symantec
symantec
Microsoft SharePoint CVE-2012-1863 Cross Site Scripting Vulnerability
2012-07-10 00:00:00
prion
prion
Cross site scripting
2012-07-10 21:55:00
cve
cve
CVE-2012-1863
2012-07-10 21:55:00
threatpost
threatpost
Serious Remote PHP Bug Accidentally Disclosed
2012-05-03 14:09:27
PHP Group Releases New Versions, But Patch Doesn't Fix CVE-2012-1823 Bug
2012-05-04 14:26:46
Another Set of PHP Releases Pushed Out to Fix CVE-2012-1823 Flaw
2012-05-09 14:32:23
mskb
mskb
securityvulns
securityvulns
Microsoft Sharepoint multiple security vulnerabilities
2012-07-11 00:00:00
nessus
nessus
openvas
openvas
Microsoft SharePoint Multiple Privilege Elevation Vulnerabilities (2695502)
2012-07-11 00:00:00