CVE-2018-0915: XSS

Published Mar 14, 2018

Updated

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0912, CVE-2018-0914, CVE-2018-0916, CVE-2018-0917, CVE-2018-0921, CVE-2018-0923, CVE-2018-0944 and CVE-2018-0947.

Affected Software

2 affected components

Microsoft Project Server=2013-sp1

Microsoft SharePoint Enterprise Server=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0915

Event History

Mar 14, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0915?

CVE-2018-0915 is classified as an elevation of privilege vulnerability that can potentially allow attackers to gain unauthorized access.

How do I fix CVE-2018-0915?

To fix CVE-2018-0915, apply the latest security updates provided by Microsoft for Project Server 2013 SP1 and SharePoint Enterprise Server 2016.

Which versions are affected by CVE-2018-0915?

CVE-2018-0915 affects Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016.

What is the impact of CVE-2018-0915?

The impact of CVE-2018-0915 is an elevation of privilege that may allow a malicious user to execute arbitrary actions on the affected system.

Who should be concerned about CVE-2018-0915?

Organizations using Microsoft Project Server 2013 SP1 or SharePoint Enterprise Server 2016 should be concerned about CVE-2018-0915 and take steps to mitigate it.