CVE-2012-0145
Microsoft SharePoint Server and Foundation - Cross-Site Scripting in wizardlist.aspx
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-011
Third Party Advisory, US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA12-045A.html
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14826
Scores
EPSS
0.1800
EPSS Percentile
96.9%
Details
CWE
CWE-79
Status
published
Products (2)
microsoft/sharepoint_foundation
2010 (2 CPE variants)
microsoft/sharepoint_server
2010 (2 CPE variants)
Published
Feb 14, 2012
Tracked Since
Feb 18, 2026