Skip to content
OpenAdvisories
Unscored CVE-2018-0909 EUVD-2018-1700GHSA-x3rx-wjvf-34g8

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how …

Published Mar 14, 2018 · Updated Sep 17, 2024 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft SharePoint

Description

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0910, CVE-2018-0911, CVE-2018-0912, CVE-2018-0913, CVE-2018-0914, CVE-2018-0915, CVE-2018-0916, CVE-2018-0917, CVE-2018-0921, CVE-2018-0923, CVE-2018-0944 and CVE-2018-0947.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft SharePoint Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 —

References