CVE-2014-1754: XSS
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1754?
The severity of CVE-2014-1754 is considered medium due to its potential to allow remote attackers to execute scripts on affected systems.
How do I fix CVE-2014-1754?
To fix CVE-2014-1754, apply the latest security updates released by Microsoft for the affected software versions.
What software is affected by CVE-2014-1754?
CVE-2014-1754 affects Microsoft SharePoint Server 2013, SharePoint Foundation 2013, Office Web Apps Server 2013, and SharePoint Server 2013 Client Components SDK.
Can CVE-2014-1754 be exploited without user interaction?
Yes, CVE-2014-1754 can be exploited remotely by an attacker without requiring user interaction.
What are the potential consequences of an exploit of CVE-2014-1754?
Exploitation of CVE-2014-1754 could allow an attacker to inject arbitrary web scripts or HTML into a website viewed by users.