CVE-2012-0145: Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold...

Security readout for executives and security teams

CVE-2012-0145 is a SharePoint 2010 cross-site scripting issue in wizardlist.aspx. An attacker could craft a URL that causes a victim’s browser to run attacker-controlled script in the SharePoint context. Business impact depends on whether legacy SharePoint 2010 remains reachable and how trusted its users are. Exposure is most likely in organizations still operating SharePoint Server 2010 or SharePoint Foundation 2010, especially unpatched Gold or SP1 builds. Internet-facing or partner-facing SharePoint increases risk. The provided affected-product metadata is incomplete, so asset validation is required. Treat this as a legacy-platform hygiene issue with moderate urgency. It is not listed as known exploited in the supplied sources, but exposed SharePoint 2010 can create account and data risk because users trust the application context. Mitigation focus: Review Microsoft MS12-011 guidance for the affected SharePoint 2010 deployment.; Apply the relevant Microsoft security update where applicable.; Prioritize externally reachable SharePoint 2010 sites for remediation..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.