CVE-2018-0864

—

CVSS 3.0

5.4 medium

EPSS

3%p84

Published

Feb 15, 2018 (Feb 15, 2018)

Modified

Jun 17, 2026

Description

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability".

Vendors: microsoft
Products: sharepoint server
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news1 stories

Microsoft Patch Tuesday

Cisco TalosFeb 13, 21:26 UTC · Feb 13, 2018Vulnerability CVE-2018-0852 CVE-2018-0763 CVE-2018-0825+49 CVEs