CVE-2017-8654

Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting (XSS) vulnerability when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability".

• CWE-79

• http://www.securityfocus.com/bid/100064Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039111Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8654Patch, Vendor Advisory
• http://www.securityfocus.com/bid/100064Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039111Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8654Patch, Vendor Advisory

Published

Aug 8, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8648Microsoft Edge in Microsoft Windows Version 1703 allows an a…
• CVE-2017-8649Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windo…
• CVE-2017-8650Microsoft Edge in Microsoft Windows 10 1703 allows an attack…
• CVE-2017-8651Internet Explorer in Microsoft Windows Server 2008 SP2 and W…
• CVE-2017-8652Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 170…
• CVE-2017-8653Microsoft browsers in Microsoft Windows 7 SP1, Windows Serve…
• CVE-2017-8655Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 170…
• CVE-2017-8656Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windo…
• CVE-2017-8657Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and…
• CVE-2017-8658A remote code execution vulnerability exists in the way that…
• CVE-2017-8659Microsoft Edge in Microsoft Windows 10 1703 allows an attack…
• CVE-2017-8660Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and…