Vulnerability in Microsoft Sharepoint Foundation
CVE-2014-2816
Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse app that executes a custom action in the context of the SharePoint extensibility model, aka "SharePoint Page Content Vulnerability."
EPSS: 0.162 (96.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Sharepoint_foundation — versions 2013
- Microsoft Sharepoint_server — versions 2013
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (x_refsource_SECUNIA, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)