CVE-2018-0911: XSS
First published: Wed Mar 14 2018(Updated: )
Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910, CVE-2018-0912, CVE-2018-0913, CVE-2018-0914, CVE-2018-0915, CVE-2018-0916, CVE-2018-0917, CVE-2018-0921, CVE-2018-0923, CVE-2018-0944 and CVE-2018-0947.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Project Server | =2013-sp1 | |
| Microsoft SharePoint Enterprise Server 2016 | =2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0911?
CVE-2018-0911 has a severity rating of important, indicating a significant risk to affected systems.
How do I fix CVE-2018-0911?
To fix CVE-2018-0911, apply the latest security updates provided by Microsoft for Project Server 2013 SP1 and SharePoint Enterprise Server 2016.
What software is affected by CVE-2018-0911?
CVE-2018-0911 affects Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016.
What type of vulnerability is CVE-2018-0911?
CVE-2018-0911 is classified as an elevation of privilege vulnerability.
Is CVE-2018-0911 easy to exploit?
Yes, CVE-2018-0911 can be exploited by sending specially crafted web requests, making it relatively easy for an attacker.
- agent/type
- agent/softwarecombine
- agent/references
- agent/weakness
- agent/remedy
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft project server
- version/microsoft project server/2013-sp1
- canonical/microsoft sharepoint enterprise server 2016
- version/microsoft sharepoint enterprise server 2016/2016