PT-2013-2087 · Microsoft · Sharepoint Server 2010 Sp1

Sunil Yadav · Publicado 2013-03-13 · Atualizado 2018-10-12 · CVE-2013-0083

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 SP1

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via crafted content. This can lead to administrative command execution.

Recommendations For Microsoft SharePoint Server 2010 SP1, update to a version that includes the fix for this issue to prevent administrative command execution via crafted web script or HTML injection.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-0083

Produtos afetados

Sharepoint Server 2010 Sp1

Referências · 4

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0083 · Nota
• http://us-cert.gov/ncas/alerts/TA13-071A · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-0083 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024 · Aviso do Fabricante