← Vulnerability feed

Vulnerability record · CVE-2004-0379 · published 4 May 2004

CVE-2004-0379: Microsoft sharepoint portal server vulnerability

Microsoft · Sharepoint Portal Server

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts.

6.8 CVSS 2.0 Medium EPSS 8.1% · top 5.4%
6.8CVSS 2.0 base score
8.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=108118352303273&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/15729
http://marc.info/?l=bugtraq&m=108118352303273&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/15729

Track CVE-2004-0379 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2013-1330Microsoft sharepoint foundation improper input validation vulnerabilityThe default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 d…EPSS 27%9.3CVE-2013-1315Microsoft excel memory buffer overflow vulnerabilityMicrosoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT…EPSS 29%9.3CVE-2013-3847Microsoft sharepoint foundation memory buffer overflow vulnerabilityMicrosoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2…EPSS 21%5.0CVE-2013-0081Microsoft SharePoint unassigned workflow handling denial of serviceSharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1/SP2, and 2013 fail to properly process unassigned workflows. A crafted URL…EPSS 77%analysed4.3CVE-2005-0049Microsoft sharepoint portal server vulnerabilityWindows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows r…EPSS 20%

Source: NIST National Vulnerability Database (record CVE-2004-0379), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.