NVD

Id
8216  
Name
CVE-2011-1252  
Description
Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified strings, aka "toStaticHTML Information Disclosure Vulnerability" or "HTML Sanitization Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-06-16  
Modified Date
2012-01-26  
Seq
2011-1252  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47276 8216 CVE-2011-1252 oval:org.mitre.oval:def:12577  View
47277 8216 CVE-2011-1252 oval:org.mitre.oval:def:12885  View
47278 8216 CVE-2011-1252 MS11-074  View
47279 8216 CVE-2011-1252 MS11-050  View
47280 8216 CVE-2011-1252 TA11-256A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31523 JVNDB-2011-001763 Microsoft Internet Explorer 7 および 8 におけるクロスサイトスクリプティングの脆弱性 Microsoft Internet Explorer 7 および 8 の toStaticHTML API には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-1252 49159 CVE-2011-1252 8216 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001763.html 2011-06-14 2011-06-27 View