CVE-2014-1754
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."
Published:May 14, 2014
Last Modified:Apr 12, 2025
EPS:May 14, 2014
EPSS Score:0.12149
CVSS Score:4.3
Affected Products
Vendor
Product
Action
Vendor
Microsoft
Product
Office Web Apps Server
Microsoft
Office Web Apps Server
Vendor
Microsoft
Product
Sharepoint Foundation
Microsoft
Sharepoint Foundation
Vendor
Microsoft
Product
Sharepoint Server
Microsoft
Sharepoint Server
Vendor
Microsoft
Product
Sharepoint Server Client Components Sdk
Microsoft
Sharepoint Server Client Components Sdk
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
