CVE-2018-8299
Severity
5.4MEDIUM
EPSS
0.8%
top 26.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 11
Latest updateMay 14
Description
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8323.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7
Affected Packages3 packages
▶CVEListV5microsoft/microsoft_sharepointEnterprise Server 2013 Service Pack 1, Enterprise Server 2016, Foundation 2013 Service Pack 1+2
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-63pf-mxwv-9gjv: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affec↗2022-05-14
CVEList▶
CVE-2018-8299: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affec↗2018-07-11