CVE-2012-0017 — Cross-site Scripting in Microsoft Sharepoint Foundation

CWE-79 — Cross-site ScriptingCWE-122 — Heap-based Buffer OverflowCWE-125 — Out-of-bounds Read6 documents5 sources
Severity
4.3MEDIUMNVD
EPSS
42.4%
top 2.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Sharepoint Foundation
Timeline
PublishedFeb 14
Latest updateMay 4

Description

Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-22cx-g984-4v34: Cross-site scripting (XSS) vulnerability in inplview↗2022-05-04
▶
CVEList
CVE-2012-0017: Cross-site scripting (XSS) vulnerability in inplview↗2012-02-14
▶

📋Vendor Advisories

2
Red Hat
libxml2: Heap-based buffer overflow when decoding an entity reference with a long name↗2012-01-06
▶
Red Hat
libxml2 out of bounds read↗2011-12-13
▶

🕵️Threat Intelligence

1
Zscaler
Zscaler Protects against Microsoft's Patch Cycle | Round 12↗
▶
CVE-2012-0017 — Cross-site Scripting in Microsoft | cvebase