CVE-2018-8578

4.3 mediumEPSS 4.9%

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint.

Severity

CVSS 3.0

4.3 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 4.9% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
Published: 2018-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:sharepoint_enterprise_server

References

http://www.securityfocus.com/bid/105832
http://www.securitytracker.com/id/1042133
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8578
http://www.securityfocus.com/bid/105832
http://www.securitytracker.com/id/1042133

Check your stack JSON