CVE-2018-0944

—

CVSS 3.0

8.8 high

EPSS

5%p91

Published

Mar 14, 2018 (Mar 14, 2018)

Modified

Jun 17, 2026

Description

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0912, CVE-2018-0913 CVE-2018-0914, CVE-2018-0915, CVE-2018-0916, CVE-2018-0917, CVE-2018-0921, CVE-2018-0923 and CVE-2018-0947.

Vendors: microsoft
Products: project server, sharepoint enterprise server
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.5%)

In the news1 stories

Microsoft Patch Tuesday

Cisco TalosMar 13, 21:38 UTC · Mar 13, 2018Vulnerability CVE-2018-0872 CVE-2018-0874 CVE-2018-0876+70 CVEs