CVE Feed

    Dashboard / CVE / CVE-2012-1863

    CVE-2012-1863

    Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability."

    Published:Jul 10, 2012
    Last Modified:Apr 11, 2025
    EPS:Jul 10, 2012
    EPSS Score:0.61898
    CVSS Score:4.3

    Affected Products

    Vendor
    Microsoft
    Product
    Office Sharepoint Server
    Vendor
    Microsoft
    Product
    Sharepoint Foundation
    Vendor
    Microsoft
    Product
    Sharepoint Server
    Vendor
    Microsoft
    Product
    Sharepoint Services

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-62204 (CVSS 8) — Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code…
    CVE-2015-2558 (CVSS 9.3) — Use-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, E…
    CVE-2010-0257 (CVSS 9.3) — Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers t…
    CVE-2010-0260 (CVSS 9.3) — Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Of…
    CVE-2010-0258 (CVSS 7.8) — Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File F…
    CVE-2010-0261 (CVSS 9.3) — Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, …
    CVE-2010-0262 (CVSS 9.3) — Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, w…
    CVE-2010-0264 (CVSS 9.3) — Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do n…
    CVE-2010-0263 (CVSS 9.3) — Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office E…
    CVE-2009-0549 (CVSS 9.3) — Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High