CVE-2018-8426

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:sharepoint_enterprise_server_2013:-:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:sharepoint_enterprise_server_2016:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:sharepoint_server_2010:-:sp2:*:*:*:*:*:*

History

No history.

Information

Published : 2018-09-13 00:29

Updated : 2024-11-21 04:13


NVD link : CVE-2018-8426

Mitre link : CVE-2018-8426

CVE.ORG link : CVE-2018-8426


JSON object : View

Products Affected

microsoft

  • sharepoint_enterprise_server_2013
  • sharepoint_enterprise_server_2016
  • sharepoint_server_2010
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')