CVE-2018-0909: XSS

Published Mar 14, 2018

Updated

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0910, CVE-2018-0911, CVE-2018-0912, CVE-2018-0913, CVE-2018-0914, CVE-2018-0915, CVE-2018-0916, CVE-2018-0917, CVE-2018-0921, CVE-2018-0923, CVE-2018-0944 and CVE-2018-0947.

Affected Software

2 affected components

Microsoft Project Server=2013-sp1

Microsoft SharePoint Enterprise Server=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0909

Event History

Mar 14, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0909?

CVE-2018-0909 has a severity rating of important.

How do I fix CVE-2018-0909?

To fix CVE-2018-0909, apply the latest security updates provided by Microsoft for Project Server 2013 SP1 and SharePoint Enterprise Server 2016.

What is the impact of CVE-2018-0909?

The impact of CVE-2018-0909 allows attackers to elevate their privileges on affected systems.

Which software is affected by CVE-2018-0909?

CVE-2018-0909 affects Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016.

When was CVE-2018-0909 disclosed?

CVE-2018-0909 was disclosed on March 13, 2018.