Search/CVE-2010-0817

● CVE

CVE-2010-0817

Cross-site scripting (XSS) vulnerability in _layouts/help.aspx in Microsoft SharePoint Server 2007 12.0.0.6421 and possibly earlier, and SharePoint Services 3.0 SP1 and SP2, versions, allows remote attackers to inject arbitrary web script or HTML via the cid0 parameter.

View graph Watch Export

CVSS v3.1

—

EPSS

28.7%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Connections

3 relationships

Timeline

disclosure → media coverage

Apr 29, 2010

Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026