| Vulnerability Name: | CVE-2012-0144 (CCN-72885) | ||||||||
| Assigned: | 2011-12-13 | ||||||||
| Published: | 2012-02-14 | ||||||||
| Updated: | 2018-10-12 | ||||||||
| Summary: | Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability." | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N) 3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-79 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2012-0144 Source: CCN Type: SA48029 Microsoft SharePoint Multiple Cross-Site Scripting Vulnerabilities Source: CCN Type: Microsoft Security Bulletin MS12-011 Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2663841) Source: CCN Type: BID-51934 Microsoft SharePoint 'themeweb.aspx' Cross Site Scripting Vulnerability Source: CERT Type: Third Party Advisory, US Government Resource TA12-045A Source: MS Type: UNKNOWN MS12-011 Source: XF Type: UNKNOWN ms-sharepoint-themeweb-xss(72885) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:14386 | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||