VYPR
← All advisories
Unrated severityNVD Advisory· Published May 14, 2014· Updated Jun 17, 2026

CVE-2014-1754

CVE-2014-1754

Description

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Microsoft/Office Web Apps2 versions
    cpe:2.3:a:microsoft:office_web_apps_server:2013:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office_web_apps_server:2013:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*
  • Microsoft/Sharepoint Foundation2 versions
    cpe:2.3:a:microsoft:sharepoint_foundation:2013:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:sharepoint_foundation:2013:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
  • Microsoft/Sharepoint Server3 versions
    cpe:2.3:a:microsoft:sharepoint_server:2013:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:sharepoint_server:2013:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*
    • (no CPE)range: = 2013 Gold and SP1
  • Microsoft/Sharepoint Server Client Components SDK
    cpe:2.3:a:microsoft:sharepoint_server_client_components_sdk:2013:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.