CVE-2013-0083

medium · 4.3

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."

4.3

CVSS

14.3%

EPSS (exploit prob.)

96th

EPSS percentile

2013-03-13

Published

AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

CWE-79

Affected products

Vendor	Product	Affected versions
microsoft	sharepoint_foundation	2010
microsoft	sharepoint_server	2010

Check a specific version with /api/v1/cve/match.

References

http://www.us-cert.gov/ncas/alerts/TA13-071A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024
http://www.us-cert.gov/ncas/alerts/TA13-071A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-0083