CVE-2017-8514

Description

An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka Microsoft SharePoint Reflective XSS Vulnerability.

Risk Information

Base Score

5.4

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.689

Associated Vulnerability

Vulnerability	OS Platform
Microsoft Office Remote Code Execution Vulnerability for Microsoft SharePoint Enterprise Server 2016 (KB3203432)	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-22651	Security Update for Microsoft SharePoint Enterprise Server 2016 (KB3203432)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234