VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 10, 2012· Updated Jun 16, 2026

CVE-2012-1860

CVE-2012-1860

Description

Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL, aka "SharePoint Search Scope Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Microsoft/Office Web Apps3 versions
    cpe:2.3:a:microsoft:office_web_apps:2010:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:office_web_apps:2010:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_web_apps:2010:sp1:*:*:*:*:*:*
    • (no CPE)range: Gold, SP1
  • Microsoft/Sharepoint Server7 versions
    cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2007:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2010:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*
    • (no CPE)range: SP2, SP3
    • (no CPE)range: Gold, SP1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.