CVE-2017-0255

CVSS 3.0: 5.4 medium
EPSS: 2%p76
Published: May 12, 2017 · May 12, 2017
Modified: Jun 17, 2026

Analyze CVE-2017-0255 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka "Microsoft SharePoint XSS Vulnerability".

Vendors: microsoft

Products: sharepoint foundation

Weakness: CWE-79

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news

1 story

Microsoft Patch Tuesday

Cisco TalosMay 10, 00:28 UTC · May 10, 2017VulnerabilityCVE-2017-0290 CVE-2017-0221 CVE-2017-0222+532