CVE-2018-8580: Microsoft SharePoint Server

Medium severity, CVSS 4.3. EPSS: 4.4% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF), aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint.

Affected products

• Microsoft SharePoint Server: version 2010 only; version 2013 only; version 2016 only

Published 2018-12-12. Last modified 2026-06-17.