Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) a…
中危 CVSS 5.4
摘要
Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different vulnerability than CVE-2015-6117.
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
- :
数据来源
- NVD DATABASE
原始链接
- http://www.securitytracker.com/id/1034653
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004
- http://www.securitytracker.com/id/1034653
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004
时间线
- nvd_ingest NVD