XSS vulnerability in Microsoft Sharepoint Server

Description

An XSS (cross-site scripting) vulnerability related to an improper sanitizing of web requests was found in Microsoft SharePoint Server. By exploiting this vulnerability malicious users can spoof user interaface. This vulnerability can be exploited remotely via a specially designed web request.

Original advisories

• CVE-2017-8654

Related products

• Microsoft-Sharepoint-Server

CVE list

• CVE-2017-8654
  warning

KB list

• 2956077

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com