CVE-2017-8745
published 2017-09-13CVE-2017-8745: An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a specially crafted…
medium5.4CVSS 3.0
AVNACLPRLUIRSCCLILAN
An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Cross Site Scripting Vulnerability".
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | tomcat | — | — |
| microsoft | sharepoint_foundation | — | — |
| microsoft_corporation | microsoft_office | — | — |
| msrc | microsoft_sharepoint_foundation_2013_service_pack_1 | — | — |