CVE-2013-1289: XSS
First published: Tue Apr 09 2013(Updated: )
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Groove Management Server | =2010-sp1 | |
| Microsoft InfoPath 2016 | =2010-sp1 | |
| Microsoft InfoPath 2016 | =2010-sp1 | |
| Microsoft Office Web Apps | =2010-sp1 | |
| Microsoft SharePoint Foundation 2013 | =2010-sp1 | |
| Microsoft SharePoint Server 2010 | =2010-sp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-1289?
CVE-2013-1289 is rated as a critical severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-1289?
To mitigate CVE-2013-1289, apply the latest security updates provided by Microsoft for the affected products.
Who is affected by CVE-2013-1289?
CVE-2013-1289 affects users of Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1.
What type of vulnerability is CVE-2013-1289?
CVE-2013-1289 is categorized as a cross-site scripting (XSS) vulnerability.
Can CVE-2013-1289 be exploited remotely?
Yes, CVE-2013-1289 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft groove management server
- version/microsoft groove management server/2010-sp1
- canonical/microsoft infopath 2016
- version/microsoft infopath 2016/2010-sp1
- canonical/microsoft office web apps
- version/microsoft office web apps/2010-sp1
- canonical/microsoft sharepoint foundation 2013
- version/microsoft sharepoint foundation 2013/2010-sp1
- canonical/microsoft sharepoint server 2010
- version/microsoft sharepoint server 2010/2010-sp1