Description

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability".

Remediation

References

CVE-2018-0864

Related Vulnerabilities

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7862)

WordPress Plugin Complianz-GDPR/CCPA Cookie Consent Cross-Site Scripting (5.5.2)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4284)

WordPress Plugin BP Portfolio Cross-Site Scripting (1.0.2)

WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2022-24839)

Severity

Medium

Classification

CVE-2018-0864 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities