CVE-2014-0251 (CNNVD-201405-236)
中文标题:
Microsoft SharePoint页面内容漏洞
英文标题:
Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 201...
漏洞描述
中文描述:
Microsoft Windows SharePoint Services等都是美国微软（Microsoft）公司的产品。Microsoft Windows SharePoint Services、SharePoint Server、SharePoint Foundation都是业务协作平台。Microsoft Project Server是一套适用于项目组合管理（PPM）和日常工作的项目管理解决方案。 Microsoft SharePoint Server中存在相关远程执行代码漏洞。成功利用其中任何相关漏洞的经过身份验证的攻击者可以在W3WP服务帐户的安全上下文中运行任意代码。以下软件受到影响：Microsoft Windows SharePoint Services 3.0 SP3；SharePoint Server 2007 SP3，2010 SP1和SP2，2013 Gold和SP1；SharePoint Foundation 2010 SP1和SP2，2013 Gold和SP1；Project Server 2010 SP1和SP2，2013 Gold和SP1；Web Applications 2010 SP1和SP2；Office Web Apps Server 2013 Gold和SP1；SharePoint Server 2013 Client Components SDK；SharePoint Designer 2007 SP3，2010 SP1和SP2，2013 Gold和SP1。
英文描述:
Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 Gold and SP1; Web Applications 2010 SP1 and SP2; Office Web Apps Server 2013 Gold and SP1; SharePoint Server 2013 Client Components SDK; and SharePoint Designer 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerability."
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| microsoft | office_web_apps_server | 2013 | - | - |
cpe:2.3:a:microsoft:office_web_apps_server:2013:*:*:*:*:*:*:*
|
| microsoft | project_server | 2010 | - | - |
cpe:2.3:a:microsoft:project_server:2010:sp1:*:*:*:*:*:*
|
| microsoft | project_server | 2013 | - | - |
cpe:2.3:a:microsoft:project_server:2013:*:*:*:*:*:*:*
|
| microsoft | sharepoint_designer | 2007 | - | - |
cpe:2.3:a:microsoft:sharepoint_designer:2007:sp3:*:*:*:*:*:*
|
| microsoft | sharepoint_designer | 2010 | - | - |
cpe:2.3:a:microsoft:sharepoint_designer:2010:sp1:*:*:*:*:*:*
|
| microsoft | sharepoint_designer | 2013 | - | - |
cpe:2.3:a:microsoft:sharepoint_designer:2013:*:*:*:*:*:*:*
|
| microsoft | sharepoint_foundation | 2010 | - | - |
cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp1:*:*:*:*:*:*
|
| microsoft | sharepoint_foundation | 2013 | - | - |
cpe:2.3:a:microsoft:sharepoint_foundation:2013:*:*:*:*:*:*:*
|
| microsoft | sharepoint_server | 2007 | - | - |
cpe:2.3:a:microsoft:sharepoint_server:2007:sp3:*:*:*:*:*:*
|
| microsoft | sharepoint_server | 2010 | - | - |
cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:*
|
| microsoft | sharepoint_server | 2013 | - | - |
cpe:2.3:a:microsoft:sharepoint_server:2013:*:*:*:*:*:*:*
|
| microsoft | sharepoint_server_client_components_sdk | 2013 | - | - |
cpe:2.3:a:microsoft:sharepoint_server_client_components_sdk:2013:*:*:*:*:*:*:*
|
| microsoft | sharepoint_services | 3.0 | - | - |
cpe:2.3:a:microsoft:sharepoint_services:3.0:sp3:*:*:*:*:*:*
|
| microsoft | web_applications | 2010 | - | - |
cpe:2.3:a:microsoft:web_applications:2010:sp1:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
AV:N/AC:L/Au:S/C:C/I:C/A:C
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2014-0251 |
2025-11-11 15:18:42 | 2025-11-11 07:33:42 |
| NVD | nvd_CVE-2014-0251 |
2025-11-11 14:54:32 | 2025-11-11 07:42:28 |
| CNNVD | cnnvd_CNNVD-201405-236 |
2025-11-11 15:09:27 | 2025-11-11 07:51:23 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 代码注入
- cnnvd_id: 未提取 -> CNNVD-201405-236
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- severity: SeverityLevel.MEDIUM -> SeverityLevel.CRITICAL
- cvss_score: 未提取 -> 9.0
- cvss_vector: NOT_EXTRACTED -> AV:N/AC:L/Au:S/C:C/I:C/A:C
- cvss_version: NOT_EXTRACTED -> 2.0
- affected_products_count: 0 -> 14
- data_sources: ['cve'] -> ['cve', 'nvd']