MEDIUM · 6.0

CVE-2015-1700

Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote authenticated users to execute arbitrary code via craf...

Vulnerability Description

Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "Microsoft SharePoint Page Content Vulnerabilities."

CVSS Score

6.0

MEDIUM

AV:N/AC:M/Au:S/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
MicrosoftSharepoint Foundation2010
MicrosoftSharepoint Server2007

Related Weaknesses (CWE)

References

FAQ

What is CVE-2015-1700?

CVE-2015-1700 is a vulnerability with a CVSS score of 6.0 (MEDIUM). Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote authenticated users to execute arbitrary code via craf...

How severe is CVE-2015-1700?

CVE-2015-1700 has been rated MEDIUM with a CVSS base score of 6.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-1700?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Sharepoint Foundation, Microsoft Sharepoint Server.