CVE-2018-8580

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search…

published December 12, 2018

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF), aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04425 · 91.3th percentile
Published
2018-12-12T00:00Z
EPSS history
Timeline
  • 12 DEC 00:00Z
    An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search…
    cvelistv5