CVE-2014-1754 Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013...
MediumCVSS 4.3
EPSS 11.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office web apps server | = 2013 | No fix listed |
| Microsoft office web apps server | = 2013-sp1 | No fix listed |
| Microsoft sharepoint foundation | = 2013 | No fix listed |
| Microsoft sharepoint foundation | = 2013-sp1 | No fix listed |
| Microsoft sharepoint server | = 2013 | No fix listed |
| Microsoft sharepoint server | = 2013-sp1 | No fix listed |
| Microsoft sharepoint server client components sdk | = 2013 | No fix listed |