CVE-2014-1754
Microsoft SharePoint - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."
Scores
EPSS
0.1332
EPSS Percentile
94.1%
Details
CWE
CWE-79
Status
published
Products (8)
microsoft/office_web_apps_server
microsoft/office_web_apps_server
microsoft/sharepoint_foundation
microsoft/sharepoint_foundation
microsoft/sharepoint_server
microsoft/sharepoint_server
microsoft/sharepoint_server_client_components_sdk
n/a/n/a
Published
May 14, 2014
Tracked Since
Feb 18, 2026