CVE-2013-3179: microsoft sharepoint_foundation Cross-site Scripting
Vulnerability summary
CVE-2013-3179 is a medium (CVSS 4.3) Cross-site Scripting vulnerability in microsoft sharepoint_foundation. EPSS estimates a 22.26% chance of exploitation in the next 30 days, higher than 97.6% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 11-09-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
22.26%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
+8.02 pp
From 14.24% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft SharePoint 2013 (Cloud) - Persistent Exception Handling (MS13-067)
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Microsoft3 products
- sharepoint_foundation2010:sp1 | 2010:sp2
- sharepoint_server2007:sp3 | 2010:sp1 | 2010:sp2
- sharepoint_services3.0
1 vendor · 3 products
References
3 links
docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067Vendor AdvisoryX Refsource MS- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18750VDB EntrySignatureX Refsource OVAL