AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2012-1861

MEDIUM · CVSS 4.3 EPSS 15.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-07-10 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2012-1861
Severity
MEDIUM
CVSS
4.3
EPSS
15.41%
Microsoft SharePoint Office Java

Original Filing — NVD Description

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability."