CVE-2016-0011: Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to...

Security readout for executives and security teams

This issue affects Microsoft SharePoint 2013 SP1 products and lets an authenticated user bypass intended access-control restrictions and trigger cross-site scripting by modifying a webpart. The public bundle does not provide severity scoring or evidence of active exploitation, so urgency depends on whether affected SharePoint instances remain in use. Exposure is most likely where SharePoint Server 2013 SP1 or SharePoint Foundation 2013 SP1 remains deployed and authenticated users can modify webparts. The bundle lists no CPEs and no broader affected-version detail. Treat as a targeted remediation item for legacy SharePoint 2013 environments. It is not KEV-listed in the bundle, but authenticated XSS and access-control bypass can matter on collaboration platforms with sensitive business content. Mitigation focus: Identify any SharePoint Server 2013 SP1 or SharePoint Foundation 2013 SP1 deployments.; Review Microsoft MS16-004 and apply the applicable vendor security update.; Restrict webpart modification privileges to trusted administrators while remediation is pending..

Prepared

Jun 13, 2026, 21:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.