CVE-2013-3895 - Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."

Back Back to CVE browser

MEDIUM

Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."

Published Oct 9, 2013

6.8

MEDIUM

CVSS 2.0

EPSS 29.64%

Description

Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (4)

http://blogs.technet.com/b/srd/archive/2013/10/08/assessing-risk-for-the-october-2013-security-updates.aspx
x_refsource_CONFIRMVendor Advisory
http://www.us-cert.gov/ncas/alerts/TA13-288A
third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-084
vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18991
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://blogs.technet.com/b/srd/archive/2013/10/08/assessing-risk-for-the-october-2013-security-updates.aspx		x_refsource_CONFIRMVendor Advisory
http://www.us-cert.gov/ncas/alerts/TA13-288A		third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-084		vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18991		vdb-entrysignaturex_refsource_OVAL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Oct 9, 2013

Updated Aug 6, 2024

Reserved Jun 3, 2013

Link CVE-2013-3895

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-3895

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-3895