CVE-2018-0912: XSS

Published Mar 14, 2018

Updated

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0913, CVE-2018-0914, CVE-2018-0915, CVE-2018-0916, CVE-2018-0917, CVE-2018-0921, CVE-2018-0923, CVE-2018-0944 and CVE-2018-0947.

Affected Software

2 affected components

Microsoft Project Server=2013-sp1

Microsoft SharePoint Enterprise Server=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0912

Event History

Mar 14, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0912?

CVE-2018-0912 has a severity rating of important, indicating a significant risk of elevation of privilege.

How do I fix CVE-2018-0912?

To fix CVE-2018-0912, apply the security updates provided by Microsoft for Project Server 2013 SP1 and SharePoint Enterprise Server 2016.

What systems are affected by CVE-2018-0912?

CVE-2018-0912 affects Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016.

What type of vulnerability is CVE-2018-0912?

CVE-2018-0912 is an elevation of privilege vulnerability caused by improper sanitization of web requests.

Can I exploit CVE-2018-0912 remotely?

Yes, CVE-2018-0912 can potentially be exploited remotely if an attacker sends specially crafted web requests.