Unrated severityNVD Advisory· Published Feb 14, 2012· Updated Jun 16, 2026
CVE-2012-0144
CVE-2012-0144
Description
Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:microsoft:sharepoint_foundation:2010:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:sharepoint_foundation:2010:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp1:*:*:*:*:*:*
- (no CPE)range: Gold and SP1
cpe:2.3:a:microsoft:sharepoint_server:2010:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:sharepoint_server:2010:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*
- Range: Gold and SP1
Patches
Vulnerability mechanics
References
3- www.us-cert.gov/cas/techalerts/TA12-045A.htmlnvdThird Party AdvisoryUS Government Resource
- docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-011nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14386nvd
News mentions
0No linked articles in our index yet.