CVE-2013-3895
No fix known EPSS 30%
Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter Injection Vulnerability."
Products: microsoft office_web_apps, microsoft sharepoint_server