CVE-2018-0912

CVE-2018-0912: vulnerability in Microsoft SharePoint

Published 14 Mar 2018 · Updated 16 Sep 2024

Follow this CVE + Monitor Microsoft SharePoint

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.5%

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0913, CVE-2018-0914, CVE-2018-0915, CVE-2018-0916, CVE-2018-0917, CVE-2018-0921, CVE-2018-0923, CVE-2018-0944 and CVE-2018-0947.

Affected products

Microsoft Corporation · Microsoft SharePoint

Related CVEs — Microsoft SharePoint

In the same product, most dangerous first.

CVE-2018-0790—CVE-2018-0790EPSS 5.3%CVE-2018-0909—CVE-2018-0909EPSS 4.5%CVE-2018-0910—CVE-2018-0910EPSS 4.5%CVE-2018-0911—CVE-2018-0911EPSS 4.5%CVE-2018-0915—CVE-2018-0915EPSS 4.5%CVE-2018-0913—CVE-2018-0913EPSS 4.5%

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0912 http://www.securityfocus.com/bid/103285 http://www.securitytracker.com/id/1040513