CVE-2012-1863: XSS
Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1863?
CVE-2012-1863 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2012-1863?
To mitigate CVE-2012-1863, ensure that you apply the latest security updates from Microsoft for affected SharePoint versions.
What types of applications are affected by CVE-2012-1863?
CVE-2012-1863 affects Microsoft Office SharePoint Server 2007 SP2/SP3, Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010.
Can CVE-2012-1863 lead to data disclosure?
Yes, CVE-2012-1863 can lead to data disclosure as attackers may inject malicious scripts that capture user data.
Is there a workaround for CVE-2012-1863?
A viable workaround for CVE-2012-1863 is to restrict input validation and escape any untrusted data before rendering it.