Back to CVE Browser

CVE-2018-0789

HIGH

8.8

CVSS Severity Score

EPSS Score0.1100%

EPSS Percentile21.68th

PublishedJan 10, 2018

Last ModifiedNov 21, 2024

Vulnerability Description

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0790.

Affected Platforms (CPE)

📦

Microsoft

Sharepoint Enterprise Server

= 2013

📦

Microsoft

Sharepoint Enterprise Server

= 2016

📦

Microsoft

Sharepoint Server

= 2010

References & Advisories

🔗 http://www.securityfocus.com/bid/102394

🔗 http://www.securitytracker.com/id/1040150

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0789

🔗 http://www.securityfocus.com/bid/102394

🔗 http://www.securitytracker.com/id/1040150

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0789

Related Vulnerabilities

CVE-2017-119368.8

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled...

CVE-2018-09138.8

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to...

CVE-2017-118768.8

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read conte...

CVE-2018-09148.8

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to...