MS.SharePoint.Notes.XSS

description-logoDescription

This indicates an attack attempt against a Cross-Site Scripting vulnerability in Microsoft SharePoint Server.
This vulnerability exists due to insufficient sanitizing of user input. It allows attackers to inject JavaScript code to potentially issue SharePoint commands in the context of another authenticated user.

affected-products-logoAffected Products

Microsoft SharePoint Server 2016

Impact logoImpact

System Compromise: Remote attackers can execute arbitrary script code within the context of the target user.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2019-07-25 14.659 Name:FG-VD-16-038_Microsoft.
0day:MS.
SharePoint.
Notes.
XSS