Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2017-8569: SharePoint Server can let attackers gain admin rights
CVE-2017-8569 · published 9 years ago
Summary
A specially crafted web request can bypass SharePoint Server's checks, allowing a low‑privilege user to obtain higher permissions on the system. This can lead to unauthorized changes or data exposure. Install the latest Microsoft security update for SharePoint Server and ensure all patches are applied promptly.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | sharepoint_server |
2016 cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:*:*:*:* |
Original advisory text
Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server ...
Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability".
References
- http://www.securityfocus.com/bid/99447 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id/1038861 Third Party Advisory VDB Entry
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8569 Patch Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published11 Jul 2017
Updated22 Oct 2026
First seen29 Sep 2026
Sources
CVE-2017-8569 · NVD
Track software like this
Free during beta