CVE-2012-1859

CVE-2012-1859 describes a Cross-Site Scripting (XSS) vulnerability within the scriptresx.ashx component of Microsoft SharePoint Server 2010, SharePoint Foundation 2010, and Office Web Apps 2010. This flaw allows remote attackers to inject arbitrary web script or HTML by crafting malicious JavaScript elements in a URL. The vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and requiring no authentication, but only resulting in partial integrity impact (e.g., defacement, session hijacking). While the EPSS score is relatively high, suggesting a higher likelihood of exploitation compared to many CVEs, the FAUCET Risk Score is also high at 91/100. Despite its risk scores, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Furthermore, there is no community discussion or media coverage surrounding this CVE, suggesting a lack of public attention or widespread exploitation.