Skip to content
NewA calmer, faster ZeroHour
Vulnerability1

CVE-2017-11820

CVSS 3.0
5.4 medium
EPSS
2%p82
Published
·
Modified
Analyze CVE-2017-11820 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka "Microsoft Office SharePoint XSS Vulnerability". This CVE ID is unique from CVE-2017-11775 and CVE-2017-11777.

Vendors
microsoft
Products
sharepoint enterprise server
Weakness
CWE-79
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news

1 story