CVE-2018-0799: Microsoft SharePoint Enterprise Server

Medium severity, CVSS 6.1. EPSS: 3.6% chance of exploitation in the next 30 days.

Microsoft Access in Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint Enterprise Server 2016 allows a cross-site-scripting (XSS) vulnerability due to the way image field values are handled, aka "Microsoft Access Tampering Vulnerability".

Affected products

• Microsoft SharePoint Enterprise Server: version 2013 only; version 2016 only

Published 2018-01-10. Last modified 2026-06-17.