CVE-2018-0909: XSS
First published: Wed Mar 14 2018(Updated: )
Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0910, CVE-2018-0911, CVE-2018-0912, CVE-2018-0913, CVE-2018-0914, CVE-2018-0915, CVE-2018-0916, CVE-2018-0917, CVE-2018-0921, CVE-2018-0923, CVE-2018-0944 and CVE-2018-0947.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Project Server | =2013-sp1 | |
| Microsoft SharePoint Enterprise Server 2016 | =2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0909?
CVE-2018-0909 has a severity rating of important.
How do I fix CVE-2018-0909?
To fix CVE-2018-0909, apply the latest security updates provided by Microsoft for Project Server 2013 SP1 and SharePoint Enterprise Server 2016.
What is the impact of CVE-2018-0909?
The impact of CVE-2018-0909 allows attackers to elevate their privileges on affected systems.
Which software is affected by CVE-2018-0909?
CVE-2018-0909 affects Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016.
When was CVE-2018-0909 disclosed?
CVE-2018-0909 was disclosed on March 13, 2018.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft project server
- version/microsoft project server/2013-sp1
- canonical/microsoft sharepoint enterprise server 2016
- version/microsoft sharepoint enterprise server 2016/2016