Description of the security update for SharePoint Server 2019: August 11, 2020

🗓️ 11 Aug 2020 07:00:00Reported by MicrosoftType

This security update resolves multiple vulnerabilities in Microsoft Office and includes improvements for SharePoint Server 2019, including enhanced accessibility and URL crawling restrictions

Reporter	Title	Published	Views	Family All 122
Information Security Automation	Microsoft Patch Tuesday August 2020: vulnerabilities with Detected Exploitation, useful for phishing and others	30 Aug 202022:13	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	28 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word’s text editor, related to errors in memory object handling, allows attackers to exploit this to disclose protected information.	28 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Enterprise Server, and Microsoft SharePoint Foundation software for electronic document management exists due to the lack of measures taken to protect the website structure. This vulnerability allows attackers to execute cross-site scripting attacks.	28 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server packages arises from the lack of measures taken to protect the structure of web pages. This allows attackers to compromise the confidentiality and integrity of the protected information.	9 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of protection for administrative data, which allows attackers to disclose protected information.	9 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, related to errors in memory object processing, allows attackers to exploit this to disclose protected information.	9 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing attackers to execute spear-phishing attacks.	9 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing attackers to execute spear-phishing attacks.	9 Sep 202000:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of Microsoft Office, Microsoft Office Online Server, and SharePoint Server, related to errors in memory object processing, allow attackers to disclose protected information.	9 Sep 202000:00	–	bdu_fstec

11 Aug 2020 07:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.5 - 8.8

CVSS 25.5

EPSS0.04906

SSVC