CVE-2013-3895
Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct...
Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."
- Record
CVE-2013-3895- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."
- Record
CVE-2013-3895- Updated
- 2026-11-02
EUVDEUVD-2013-3827 No score
Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."
- Record
EUVD-2013-3827- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wcw7-2xp7-h88h No score
Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct...
Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."
- Record
GHSA-wcw7-2xp7-h88h- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-3895 is a medium vulnerability (CVSS 6.8) in Microsoft Sharepoint Server, published October 9, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 34.0%, the 98th percentile. No source names a fixed version.
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-084
us-cert.gov/ncas/alerts/TA13-288A
blogs.technet.com/b/srd/archive/2013/10/08/assessing-risk-for-the-october-2013-security-updates.aspx
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18991
nvd.nist.gov/vuln/detail/CVE-2013-3895
github.com/advisories/GHSA-wcw7-2xp7-h88h