| Vulnerability Name: | CVE-2011-1891 (CCN-68836) | ||||||||
| Assigned: | 2011-09-13 | ||||||||
| Published: | 2011-09-13 | ||||||||
| Updated: | 2018-10-12 | ||||||||
| Summary: | Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerability." | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N) 3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-79 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2011-1891 Source: CCN Type: SA45915 Microsoft SharePoint Cross-Site Scripting and Script Insertion Vulnerabilities Source: CCN Type: Microsoft Security Bulletin MS11-074 Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2451858) Source: CCN Type: BID-49005 Microsoft SharePoint Contact Details Cross Site Scripting Vulnerability Source: CERT Type: US Government Resource TA11-256A Source: MS Type: UNKNOWN MS11-074 Source: XF Type: UNKNOWN ms-sharepoint-details-xss(68836) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:12864 | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||