8.8high
CVE-2018-0789
Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
8.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.4%
percentile 94%
Public exploits
0
none known
Summary
Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0790.
Exploit prediction (EPSS)
6.37% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 8.8 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.0 | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Affected products
- Microsoft Corporation Microsoft SharePoint Server
References
- portal.msrc.microsoft.com /en-US/security-guidance/advisory/CVE-2018-0789 · x_refsource_CONFIRM, x_transferred
- securitytracker.com /id/1040150 · vdb-entry, x_refsource_SECTRACK, x_transferred
- securityfocus.com /bid/102394 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2018-0789
- NVD: CVE-2018-0789
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.