CVE-2016-0011

CVSS 3.0: 5.4 medium
EPSS: 5%p92
Published: Jan 13, 2016 · Jan 13, 2016
Modified: Oct 15, 2026

Analyze CVE-2016-0011 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different vulnerability than CVE-2015-6117.

Vendors: microsoft

Products: sharepoint server, sharepoint foundation

Weakness: CWE-79

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (5.3%)

In the news

1 story

Microsoft Patch Tuesday

Cisco TalosJan 12, 21:17 UTC · Jan 12, 2016VulnerabilityCVE-2016-0002 CVE-2016-0005 CVE-2016-0003+172 · 1 read