CVE-2017-11820

Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS)…

published October 13, 2017

CVSS
—
EPSS
2%
Percentile
82.9
In the wild
Unconfirmed
What it is

Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS) vulnerability by sending a specially crafted request to an affected SharePoint server, due to how SharePoint Server sanitizes web requests, aka "Microsoft Office SharePoint XSS Vulnerability". This CVE ID is unique from CVE-2017-11775 and CVE-2017-11777.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02267 · 82.9th percentile
Published
2017-10-13T13:00Z
EPSS history
Timeline
  • 13 OCT 13:00Z
    Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS)…
    cvelistv5