Medium severity6.1NVD Advisory· Published Jan 10, 2018· Updated Jun 17, 2026

CVE-2018-0799

Description

Microsoft Access in Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint Enterprise Server 2016 allows a cross-site-scripting (XSS) vulnerability due to the way image field values are handled, aka "Microsoft Access Tampering Vulnerability".

Affected products

Microsoft/Accessllm-fuzzy
Microsoft Corporation/Microsoft Accessv5
Range: Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint Enterprise Server 2016

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0799nvdPatchVendor Advisory
www.securityfocus.com/bid/102411nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040157nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000