Lucene search
MicrosoftCVE-2012-1859HistoryJul 10, 2012 - 9:55 p.m.
CVE-2012-1859
2012-07-1021:55:05
CWE-79
microsoft
web.nvd.nist.gov
117
xss
vulnerability
microsoft
sharepoint
server
2010
gold
sp1
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.849
Percentile
98.6%
Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka “XSS scriptresx.ashx Vulnerability.”
Affected configurations
Node
microsoftoffice_web_appsMatch2010
ORmicrosoftoffice_web_appsMatch2010sp1
ORmicrosoftsharepoint_foundationMatch2010
ORmicrosoftsharepoint_foundationMatch2010sp1
ORmicrosoftsharepoint_serverMatch2010
ORmicrosoftsharepoint_serverMatch2010sp1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | office_web_apps | 2010 | cpe:2.3:a:microsoft:office_web_apps:2010:*:*:*:*:*:*:* |
| microsoft | office_web_apps | 2010 | cpe:2.3:a:microsoft:office_web_apps:2010:sp1:*:*:*:*:*:* |
| microsoft | sharepoint_foundation | 2010 | cpe:2.3:a:microsoft:sharepoint_foundation:2010:*:*:*:*:*:*:* |
| microsoft | sharepoint_foundation | 2010 | cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp1:*:*:*:*:*:* |
| microsoft | sharepoint_server | 2010 | cpe:2.3:a:microsoft:sharepoint_server:2010:*:*:*:*:*:*:* |
| microsoft | sharepoint_server | 2010 | cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-1859
2012-07-10 21:00:00
checkpoint_advisories
checkpoint_advisories
prion
prion
Cross site scripting
2012-07-10 21:55:00
nvd
nvd
CVE-2012-1859
2012-07-10 21:55:05
seebug
seebug
Microsoft SharePoint 'scriptresx.ashx'跨站脚本漏洞
2012-07-11 00:00:00
securityvulns
securityvulns
Microsoft Sharepoint multiple security vulnerabilities
2012-07-11 00:00:00
nessus
nessus
openvas
openvas
Microsoft SharePoint Multiple Privilege Elevation Vulnerabilities (2695502)
2012-07-11 00:00:00
mskb
mskb
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.849
Percentile
98.6%
Related for CVE-2012-1859