CVE-2013-3895: Medium severity microsoft office web apps vulnerability

Published Oct 9, 2013

Updated

Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."

Affected Software

5 affected components

Microsoft Office Web Apps=2010

Microsoft SharePoint Server=2007-sp3

Microsoft SharePoint Server=2010-sp1

Microsoft SharePoint Server=2010-sp2

Microsoft SharePoint Server=2013

Event History

Oct 9, 2013

CVE Published

via MITRE·02:44 PM

Data Sourced

via MITRE·02:44 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3895?

CVE-2013-3895 has a critical severity rating due to its potential to allow unauthorized actions through clickjacking attacks.

How do I fix CVE-2013-3895?

To fix CVE-2013-3895, apply the latest security updates provided by Microsoft for affected SharePoint and Office Web Apps versions.

What are the affected products for CVE-2013-3895?

CVE-2013-3895 affects Microsoft SharePoint Server 2007 SP3, 2010 SP1, 2010 SP2, and Microsoft Office Web Apps 2010.

What type of attack can be executed through CVE-2013-3895?

CVE-2013-3895 allows remote attackers to conduct clickjacking attacks via crafted web pages.

Is CVE-2013-3895 related to any other vulnerabilities?

CVE-2013-3895 is specifically a parameter injection vulnerability that is associated with clickjacking techniques.