Not rated
CVE-2018-8580 An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server…
Description
An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF), aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft SharePoint | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 106096 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft SharePoint
The 35 CVEs of Microsoft SharePoint →
CVE-2019-0585
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in…
Not rated
CVE-2019-0562
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially…
Not rated
CVE-2019-0556
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a…
5.4
Medium
CVE-2019-0558
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a…
5.4
Medium