Unrated severityNVD Advisory· Published Feb 14, 2012· Updated Jun 16, 2026
CVE-2012-0145
CVE-2012-0145
Description
Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:microsoft:sharepoint_foundation:2010:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:sharepoint_foundation:2010:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp1:*:*:*:*:*:*
- (no CPE)range: Gold and SP1
cpe:2.3:a:microsoft:sharepoint_server:2010:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:sharepoint_server:2010:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*
- Range: Gold and SP1
Patches
Vulnerability mechanics
References
3- www.us-cert.gov/cas/techalerts/TA12-045A.htmlnvdThird Party AdvisoryUS Government Resource
- docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-011nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14826nvd
News mentions
0No linked articles in our index yet.