CVE-2018-8426: XSS

Published Sep 13, 2018

Updated

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint.

Affected Software

3 affected components

Microsoft SharePoint Enterprise Server 2013=sp1

Microsoft SharePoint Enterprise Server 2016

Microsoft SharePoint Server 2010=sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8426

Event History

Sep 13, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-8426?

CVE-2018-8426 is a cross-site scripting (XSS) vulnerability that exists in Microsoft SharePoint Server.

How does CVE-2018-8426 affect Microsoft SharePoint Server?

CVE-2018-8426 affects Microsoft SharePoint Server by allowing an attacker to execute malicious scripts in the context of the user's browser.

What is the severity of CVE-2018-8426?

The severity of CVE-2018-8426 is medium with a CVSS score of 5.4.

How can I fix CVE-2018-8426 in Microsoft SharePoint Server 2010?

To fix CVE-2018-8426 in Microsoft SharePoint Server 2010, apply Service Pack 2 (SP2) or later.

Where can I find more information about CVE-2018-8426?

You can find more information about CVE-2018-8426 on the Microsoft Security Guidance Advisory for CVE-2018-8426.