4.3
CVSSv2

CVE-2013-1289

Published: 09/04/2013 Updated: 12/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote malicious users to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft infopath 2010

microsoft groove server 2010

microsoft sharepoint foundation 2010

microsoft sharepoint server 2010

microsoft office web apps 2010