CVE-2018-0923

CVE-2018-0923: vulnerability in Microsoft SharePoint

Published 14 Mar 2018 · Updated 16 Sep 2024

Follow this CVE + Monitor Microsoft SharePoint

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.5%

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0912, CVE-2018-0913 CVE-2018-0914, CVE-2018-0915, CVE-2018-0916, CVE-2018-0917, CVE-2018-0921, CVE-2018-0944 and CVE-2018-0947.

Affected products

Microsoft Corporation · Microsoft SharePoint

Related CVEs — Microsoft SharePoint

In the same product, most dangerous first.

CVE-2018-0790—CVE-2018-0790EPSS 5.3%CVE-2018-0911—CVE-2018-0911EPSS 4.5%CVE-2018-0909—CVE-2018-0909EPSS 4.5%CVE-2018-0910—CVE-2018-0910EPSS 4.5%CVE-2018-0913—CVE-2018-0913EPSS 4.5%CVE-2018-0912—CVE-2018-0912EPSS 4.5%

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0923 http://www.securityfocus.com/bid/103308 http://www.securitytracker.com/id/1040513