CVE-2018-8300

HIGH

Microsoft SharePoint Enterprise Server - Remote Code Execution via Application Package Source Markup

Title source: llm

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka "Microsoft SharePoint Remote Code Execution Vulnerability." This affects Microsoft SharePoint.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/104614

Patch, Vendor Advisory x_refsource_confirm

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8300

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1041261

Scores

CVSS v3 8.8

EPSS 0.1275

EPSS Percentile 95.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-20

Status published

Products (2)

microsoft/sharepoint_enterprise_server 2013 sp1

microsoft/sharepoint_enterprise_server 2016

Published Jul 11, 2018

Tracked Since Feb 18, 2026