CVE-2014-1754 in SharePoint Server
Summary
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/29/2014
Disclosure
05/14/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13225 | Microsoft SharePoint Server cross site scripting | 79 | Unproven | Official fix | CVE-2014-1754 |