CVE Database
/

CVE-2018-8580

Back to search

CVE-2018-8580

Published: Dec 12, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF), aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint.

VendorProductVersions

Microsoft

Microsoft SharePoint

affected
Enterprise Server 2013 Service Pack 1
affected
Enterprise Server 2016
affected
Foundation 2010 Service Pack 2

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now