Gravità: : Alto
  Identificatori CVE: CVE-2014-2816
  Data notifica: 14 agosto 2014

  Descrizione

This security update resolves one privately reported vulnerability in Microsoft SharePoint Server. An authenticated attacker who successfully exploited this vulnerability could use a specially crafted app to run arbitrary JavaScript in the context of the user on the current SharePoint site.

  Soluzioni

  Software e versione interessati:

  • Microsoft SharePoint Server 2013
  • Microsoft SharePoint Server 2013 Service Pack 1