PT-2013-2087 · Microsoft · Sharepoint Server 2010 Sp1

Sunil Yadav · Published 2013-03-13 · Updated 2018-10-12 · CVE-2013-0083

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 SP1

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via crafted content. This can lead to administrative command execution.

Recommendations For Microsoft SharePoint Server 2010 SP1, update to a version that includes the fix for this issue to prevent administrative command execution via crafted web script or HTML injection.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-0083

Affected Products

Sharepoint Server 2010 Sp1

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-0083 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0083 · Note
• http://us-cert.gov/ncas/alerts/TA13-071A · Note