CVE-2011-1893 Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbit...
MediumCVSS 4.3
EPSS 16.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "SharePoint XSS Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft sharepoint foundation | = 2010 | No fix listed |
| Microsoft sharepoint server | = 2010 | No fix listed |
| Microsoft sharepoint services | = 2.0 | No fix listed |
| Microsoft sharepoint services | = 3.0-sp2 | No fix listed |
References
- TA11-256A third-party-advisory us-government-resource
- MS11-074 vendor-advisory
- oval:org.mitre.oval:def:12676 signature vdb-entry