CVE-2018-8300

Опубликовано: 11 июл. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Средний

Описание

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka "Microsoft SharePoint Remote Code Execution Vulnerability." This affects Microsoft SharePoint.

Ссылки

http://www.securityfocus.com/bid/104614
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041261
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8300
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104614
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041261
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8300
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.18206

Средний

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2018-8300

msrc

около 7 лет назад

Microsoft SharePoint Remote Code Execution Vulnerability

GHSA-r894-c8ph-2pv7