Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2017-8745

EPSS 1.29% · P80
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-8745

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Cross Site Scripting Vulnerability".
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft SharePoint Foundation 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft SharePoint Foundation是美国微软(Microsoft)公司的一套基于Web的面向小型组织或部门的协作平台。 Microsoft SharePoint Foundation 2013 SP1中存在跨站脚本漏洞,该漏洞源于程序没有正确的过滤特制的Web请求。远程攻击者可借助特制的Web请求利用该漏洞在浏览器中执行任意脚本代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
Microsoft CorporationMicrosoft Office Microsoft SharePoint Foundation 2013 Service Pack 1 -

II. Public POCs for CVE-2017-8745

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-8745

登录查看更多情报信息。

Same Patch Batch · Microsoft Corporation · 2017-09-13 · 77 CVEs total

CVE-2017-8728Microsoft Windows PDF Library 安全漏洞
CVE-2017-8752Microsoft Windows Edge scripting引擎安全漏洞
CVE-2017-8739Microsoft Windows Edge scripting引擎信息泄露漏洞
CVE-2017-8738Microsoft Windows Edge scripting引擎安全漏洞
CVE-2017-8737Microsoft Windows PDF Library 安全漏洞
CVE-2017-8736Microsoft Windows Edge和Internet Explorer 信息泄露漏洞
CVE-2017-8735Microsoft Windows Edge 安全漏洞
CVE-2017-8734Microsoft Windows Edge 安全漏洞
CVE-2017-8733Microsoft Windows Internet Explorer 安全漏洞
CVE-2017-8729Microsoft Windows Edge scripting引擎安全漏洞
CVE-2017-8740Microsoft Windows Edge scripting引擎安全漏洞
CVE-2017-8725Microsoft Publisher 安全漏洞
CVE-2017-8724Microsoft Windows Edge 安全漏洞
CVE-2017-8723Microsoft Windows Edge 安全漏洞
CVE-2017-8720Microsoft Windows graphics组件权限许可和访问控制问题漏洞
CVE-2017-8719Microsoft Windows内核组件息泄露漏洞
CVE-2017-8716Microsoft Windows Control Flow Guard 安全漏洞
CVE-2017-8714Microsoft Windows Hyper-V组件安全漏洞
CVE-2017-8713Microsoft Windows Hyper-V组件信息泄露漏洞
CVE-2017-8712Microsoft Windonws 信息泄露漏洞

Showing top 20 of 77 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2017-8745

No comments yet


Leave a comment