AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-8326

MEDIUM · CVSS 5.4 EPSS 2.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-07-11 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-8326
Severity
MEDIUM
CVSS
5.4
EPSS
2.37%
Microsoft

Original NVD Description

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Open Source Customization for Active Directory Federation Services XSS Vulnerability." This affects Web Customizations.