Microsoft SharePoint Remote Elevation of Privilege Vulnerability (CNVD-2018-07006)

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 are both products of Microsoft Corporation, U.S.A. Microsoft Project Server is a suite of Project Portfolio Management PPM and day to day Microsoft Project Server is a project management solution for project portfolio...

Microsoft SharePoint Remote Elevation of Privilege Vulnerability (CNVD-2018-07008)

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 are both products of Microsoft Corporation, U.S.A. Microsoft Project Server is a suite of Project Portfolio Management PPM and day to day Microsoft Project Server is a project management solution for project portfolio...

Microsoft SharePoint Remote Elevation of Privilege Vulnerability (CNVD-2018-07009)

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 are both products of Microsoft Corporation, U.S.A. Microsoft Project Server is a suite of Project Portfolio Management PPM and day to day Microsoft Project Server is a project management solution for project portfolio...

Microsoft SharePoint Remote Elevation of Privilege Vulnerability (CNVD-2018-07007)

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 are both products of Microsoft Corporation, U.S.A. Microsoft Project Server is a suite of Project Portfolio Management PPM and day to day Microsoft Project Server is a project management solution for project portfolio...

CVE-2018-0914: Improper Neutralization of Input During Web Page Generation

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...

CVE-2018-0911: Improper Neutralization of Input During Web Page Generation

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...

CVE-2018-0910: Improper Neutralization of Input During Web Page Generation

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...

CVE-2018-0909: Improper Neutralization of Input During Web Page Generation

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0910,...

Description of the security update for Project Server 2013: March 13, 2018

Description of the security update for Project Server 2013: March 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, go to the Securit...

Microsoft SharePoint Server CVE-2018-0911 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

Microsoft Project Server and SharePoint Enterprise Server Elevation of Privilege Vulnerability (CNVD-2018-05733)

Microsoft Project Server and SharePoint Enterprise Server are both products of Microsoft Corporation, U.S.A. Microsoft Project Server 2013 is a project management solution for project portfolio management PPM and day-to-day work. SharePoint Enterprise Server 2016 is an enterprise business...

CVE-2018-0864

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability"...

CVE-2018-0864: Improper Neutralization of Input During Web Page Generation

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability"...

Security Update for Microsoft Project Server 2013 (KB4011701) farm-deployment

A security vulnerability exists in Microsoft Project Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for Project Server 2013: February 13, 2018

Description of the security update for Project Server 2013: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

PT-2018-9112

Name of the Vulnerable Software and Affected Versions: SharePoint Project Server 2013 SharePoint Enterprise Server 2016 Description: The issue is related to how web requests are handled, allowing an information disclosure. An elevation of privilege vulnerability exists due to improper sanitizatio...

Security Update for Microsoft Project Server 2013 (KB4011257) farm-deployment

A security vulnerability exists in Microsoft Project Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Office CVE-2017-11876 Cross Site Request Forgery Vulnerability

Description Microsoft Office is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible. Technologies Affected Microsoft Project Serve...

Description of the security update for Project Server 2013: June 13, 2017

Description of the security update for Project Server 2013: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Comm...

CVE-2017-0281

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint...