CVE-2017-8654: XSS

Published Aug 8, 2017

Updated

Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting (XSS) vulnerability when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability".

Affected Software

1 affected component

Microsoft SharePoint Server=2010-sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8654

Event History

Aug 8, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-8654?

CVE-2017-8654 has a severity rating that may lead to significant security risks due to cross-site scripting (XSS).

How do I fix CVE-2017-8654?

To fix CVE-2017-8654, update your Microsoft SharePoint Server 2010 to the latest security updates provided by Microsoft.

What causes CVE-2017-8654?

CVE-2017-8654 is caused by improper sanitization of input in web requests on affected SharePoint servers.

Who is affected by CVE-2017-8654?

CVE-2017-8654 affects users of Microsoft SharePoint Server 2010 Service Pack 2.

Can CVE-2017-8654 lead to data breaches?

Yes, CVE-2017-8654 can potentially lead to data breaches through exploitation of the XSS vulnerability.