CVEvulnerability
CVE-2018-8300
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-07-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka "Microsoft SharePoint Remote Code Execution Vulnerability." This affects Microsoft SharePoint.
Affected configurations
• microsoft sharepoint enterprise server 2013
• microsoft sharepoint enterprise server 2016
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/104614 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041261 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8300 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/104614 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041261 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8300 Patch, Vendor Advisory