CVE-2013-1289observed exploitation

CVE-2013-1289

Published · Updated

30Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 15%
from disclosure to weapon
Published on NVDApr 9
VulnCheckApr 9
exploitation probability
15%top 3% of all CVEs
observed exploitation
yesVulnCheck
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
Affected products
n/a · n/a
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-035https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16599http://www.us-cert.gov/ncas/alerts/TA13-100A