Description
Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "SharePoint XSS Vulnerability."
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-074
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12676
US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA11-256A.html
Scores
EPSS
0.1677
EPSS Percentile
96.7%
Details
CWE
CWE-79
Status
published
Products (4)
microsoft/sharepoint_foundation
2010
microsoft/sharepoint_server
2010
microsoft/sharepoint_services
2.0
microsoft/sharepoint_services
3.0 sp2 (2 CPE variants)
Published
Sep 15, 2011
Tracked Since
Feb 18, 2026