CVE-2011-1893

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
4.3MEDIUM
EPSS
58.9%
top 1.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Sharepoint FoundationMicrosoft Sharepoint ServerMicrosoft Sharepoint Services
Timeline
PublishedSep 15
Latest updateMay 14

Description

Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "SharePoint XSS Vulnerability."

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

🔴Vulnerability Details

2
GHSA
GHSA-fq96-cmp6-cvxq: Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2↗2022-05-14
▶
CVEList
CVE-2011-1893: Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2↗2011-09-15
▶
CVE-2011-1893 (MEDIUM CVSS 4.3) | Cross-site scripting (XSS) vulnerab | cvebase.io