cbcvebase.
CVE-2018-8254
published 2018-06-14

CVE-2018-8254: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…

medium5.4CVSS 3.0
AVNACLPRLUIRSCCLILAN
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft Project Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8252.

Affected

9 ranges
VendorProductVersion rangeFixed in
microsoftmicrosoft_project_server
microsoftmicrosoft_sharepoint
microsoftmicrosoft_sharepoint
microsoftproject_server
microsoftsharepoint_foundation
microsoftsharepoint_server
msrcmicrosoft_project_server_2010_service_pack_2
msrcmicrosoft_sharepoint_enterprise_server_2016
msrcmicrosoft_sharepoint_foundation_2013_service_pack_1