CVE-2015-1700: Input Validation
Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "Microsoft SharePoint Page Content Vulnerabilities."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1700?
CVE-2015-1700 has a high severity rating due to its potential for remote code execution by authenticated users.
How do I fix CVE-2015-1700?
To fix CVE-2015-1700, apply the latest security updates provided by Microsoft for the affected SharePoint versions.
Which versions of SharePoint are affected by CVE-2015-1700?
CVE-2015-1700 affects SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1.
Who can exploit CVE-2015-1700?
CVE-2015-1700 can be exploited by remote authenticated users who can create and upload crafted page content.
What type of vulnerability is CVE-2015-1700?
CVE-2015-1700 is a remote code execution vulnerability found in Microsoft SharePoint due to improperly handled page content.