Lucene search

[email protected]NVD:CVE-2014-0251

HistoryMay 14, 2014 - 11:13 a.m.

CVE-2014-0251

2014-05-1411:13:04

CWE-94

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.1

Confidence

Low

EPSS

0.02

Percentile

89.0%

JSON

Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 Gold and SP1; Web Applications 2010 SP1 and SP2; Office Web Apps Server 2013 Gold and SP1; SharePoint Server 2013 Client Components SDK; and SharePoint Designer 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka “SharePoint Page Content Vulnerability.”

Affected configurations

Nvd

Node

microsoftoffice_web_apps_serverMatch2013

microsoftoffice_web_apps_serverMatch2013sp1

microsoftproject_serverMatch2010sp1

microsoftproject_serverMatch2010sp2

microsoftproject_serverMatch2013

microsoftproject_serverMatch2013sp1

microsoftsharepoint_designerMatch2007sp3

microsoftsharepoint_designerMatch2010sp1

microsoftsharepoint_designerMatch2010sp2

microsoftsharepoint_designerMatch2013

microsoftsharepoint_designerMatch2013sp1

microsoftsharepoint_foundationMatch2010sp1

microsoftsharepoint_foundationMatch2010sp2

microsoftsharepoint_foundationMatch2013

microsoftsharepoint_foundationMatch2013sp1

microsoftsharepoint_serverMatch2007sp3

microsoftsharepoint_serverMatch2010sp1

microsoftsharepoint_serverMatch2010sp2

microsoftsharepoint_serverMatch2013

microsoftsharepoint_serverMatch2013sp1

microsoftsharepoint_server_client_components_sdkMatch2013

microsoftsharepoint_servicesMatch3.0sp3

microsoftweb_applicationsMatch2010sp1

microsoftweb_applicationsMatch2010sp2

VendorProductVersionCPE
microsoftoffice_web_apps_server2013cpe:2.3:a:microsoft:office_web_apps_server:2013:*:*:*:*:*:*:*
microsoftoffice_web_apps_server2013cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*
microsoftproject_server2010cpe:2.3:a:microsoft:project_server:2010:sp1:*:*:*:*:*:*
microsoftproject_server2010cpe:2.3:a:microsoft:project_server:2010:sp2:*:*:*:*:*:*
microsoftproject_server2013cpe:2.3:a:microsoft:project_server:2013:*:*:*:*:*:*:*
microsoftproject_server2013cpe:2.3:a:microsoft:project_server:2013:sp1:*:*:*:*:*:*
microsoftsharepoint_designer2007cpe:2.3:a:microsoft:sharepoint_designer:2007:sp3:*:*:*:*:*:*
microsoftsharepoint_designer2010cpe:2.3:a:microsoft:sharepoint_designer:2010:sp1:*:*:*:*:*:*
microsoftsharepoint_designer2010cpe:2.3:a:microsoft:sharepoint_designer:2010:sp2:*:*:*:*:*:*
microsoftsharepoint_designer2013cpe:2.3:a:microsoft:sharepoint_designer:2013:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	office_web_apps_server	2013	cpe:2.3:a:microsoft:office_web_apps_server:2013:::::::*
microsoft	office_web_apps_server	2013	cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1::::::
microsoft	project_server	2010	cpe:2.3:a:microsoft:project_server:2010:sp1::::::
microsoft	project_server	2010	cpe:2.3:a:microsoft:project_server:2010:sp2::::::
microsoft	project_server	2013	cpe:2.3:a:microsoft:project_server:2013:::::::*
microsoft	project_server	2013	cpe:2.3:a:microsoft:project_server:2013:sp1::::::
microsoft	sharepoint_designer	2007	cpe:2.3:a:microsoft:sharepoint_designer:2007:sp3::::::
microsoft	sharepoint_designer	2010	cpe:2.3:a:microsoft:sharepoint_designer:2010:sp1::::::
microsoft	sharepoint_designer	2010	cpe:2.3:a:microsoft:sharepoint_designer:2010:sp2::::::
microsoft	sharepoint_designer	2013	cpe:2.3:a:microsoft:sharepoint_designer:2013:::::::*