Lucene search
HistoryJul 10, 2012 - 9:55 p.m.
CVE-2012-1861
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.839
Percentile
98.5%
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka “SharePoint Script in Username Vulnerability.”
Affected configurations
Node
microsoftoffice_web_appsMatch2010
ORmicrosoftoffice_web_appsMatch2010sp1
ORmicrosoftsharepoint_foundationMatch2010
ORmicrosoftsharepoint_foundationMatch2010sp1
ORmicrosoftsharepoint_serverMatch2010
ORmicrosoftsharepoint_serverMatch2010sp1
Related
prion
prion
Cross site scripting
2012-07-10 21:55:00
checkpoint_advisories
checkpoint_advisories
symantec
symantec
Microsoft SharePoint CVE-2012-1861 HTML Injection Vulnerability
2012-07-10 00:00:00
cve
cve
CVE-2012-1861
2012-07-10 21:55:05
cvelist
cvelist
CVE-2012-1861
2012-07-10 21:00:00
securityvulns
securityvulns
Microsoft Sharepoint multiple security vulnerabilities
2012-07-11 00:00:00
nessus
nessus
openvas
openvas
Microsoft SharePoint Multiple Privilege Elevation Vulnerabilities (2695502)
2012-07-11 00:00:00
mskb
mskb
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.839
Percentile
98.5%
Related for NVD:CVE-2012-1861