CVE-2016-0011 — Vulnerability intelligence

microsoft — sharepoint server

Published: 2016-01-13T05:59:09.387

CVSS

5.4

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different vulnerability than CVE-2015-6117.

Sources

• CVE-2016-0011
• Original advisory