CVE-2013-1289: XSS

Published Apr 9, 2013

Updated

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."

Affected Software

6 affected components

Microsoft Groove Server=2010-sp1

Microsoft InfoPath=2010-sp1

Microsoft Office Web Apps=2010-sp1

Microsoft SharePoint Foundation=2010-sp1

Microsoft SharePoint Server=2010-sp1

Event History

Apr 9, 2013

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-1289?

CVE-2013-1289 is rated as a critical severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2013-1289?

To mitigate CVE-2013-1289, apply the latest security updates provided by Microsoft for the affected products.

Who is affected by CVE-2013-1289?

CVE-2013-1289 affects users of Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1.

What type of vulnerability is CVE-2013-1289?

CVE-2013-1289 is categorized as a cross-site scripting (XSS) vulnerability.

Can CVE-2013-1289 be exploited remotely?

Yes, CVE-2013-1289 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.