5
CVE-2013-0081
- EPSS 60.25%
- Published 11.09.2013 14:03:47
- Last modified 11.04.2025 00:51:21
- Source secure@microsoft.com
- Teams watchlist Login
- Open Login
Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka "SharePoint Denial of Service Vulnerability."
Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Sharepoint Foundation Version2010 Updatesp1
Microsoft ≫ Sharepoint Foundation Version2010 Updatesp2
Microsoft ≫ Sharepoint Foundation Version2013
Microsoft ≫ Sharepoint Portal Server Version2003 Updatesp3
Microsoft ≫ Sharepoint Server Version2007 Updatesp3
Microsoft ≫ Sharepoint Server Version2010 Updatesp1
Microsoft ≫ Sharepoint Server Version2010 Updatesp2
Microsoft ≫ Sharepoint Server Version2013
Microsoft ≫ Sharepoint Services Version2.0
Microsoft ≫ Sharepoint Services Version3.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 60.25% | 0.981 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.