CVEブラウザに戻る

CVE-2018-0789

HIGH

8.8

CVSS Severity Score

EPSS Score0.1100%

EPSS Percentile21.68th

Published2018年1月10日

Last Modified2024年11月21日

Vulnerability Description

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0790.

Affected Platforms (CPE)

📦

Microsoft

Sharepoint Enterprise Server

= 2013

📦

Microsoft

Sharepoint Enterprise Server

= 2016

📦

Microsoft

Sharepoint Server

= 2010

References & Advisories

🔗 http://www.securityfocus.com/bid/102394

🔗 http://www.securitytracker.com/id/1040150

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0789

🔗 http://www.securityfocus.com/bid/102394

🔗 http://www.securitytracker.com/id/1040150

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0789

関連する脆弱性情報

CVE-2017-119368.8

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled...

CVE-2018-09138.8

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to...

CVE-2017-118768.8

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read conte...

CVE-2018-09148.8

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to...