Medium severity4.3NVD Advisory· Published Dec 12, 2018· Updated Jun 17, 2026
CVE-2018-8580
CVE-2018-8580
Description
An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF), aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint.
Affected products
5cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:foundation:*:*:*+ 3 more
- cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:foundation:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:enterprise:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
- (no CPE)
- Range: Enterprise Server 2013 Service Pack 1
Patches
Vulnerability mechanics
References
2- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8580nvdPatchVendor Advisory
- www.securityfocus.com/bid/106096nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.