CVE-2020-1177

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1178

Technical details for CVE-2020-1178 are not publicly provided in the supplied documents; no affected versions, root cause, exploitation details, or mitigations are shown. Monitor for official advisories to obtain concrete information.

CVE-2020-1178

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka 'Microsoft SharePoint Server Elevation of Privilege Vulnerability'...

Description of the security update for SharePoint Enterprise Server 2013: June 9, 2020

None None...

Description of the security update for SharePoint Enterprise Server 2016: June 9, 2020

None None...

Description of the security update for SharePoint Server 2019: June 9, 2020

None None...

Description of the security update for SharePoint Server 2010: June 9, 2020

Description of the security update for SharePoint Server 2010: June 9, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the followin...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

PT-2020-3556 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A cross-site-scripting XSS issue...

PT-2020-2849 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site-scripting XSS issue exists due to improper sanitization of specially crafted web requests. An authenticated attacker could exploit this by sending a special...

CVE-2020-1183: Improper Neutralization of Input During Web Page Generation

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1177, CVE-2020-1297, CVE-2020-1298...

CVE-2020-1181: Undefined Security Weakness

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'...

CVE-2020-1148: Improper Neutralization of Input During Web Page Generation

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1289...

CVE-2020-1178: Undefined Security Weakness

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka 'Microsoft SharePoint Server Elevation of Privilege Vulnerability'...

PT-2020-2847

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description A spoofing issue exists due to improper sanitization of specially crafted web requests. This could allow a remote attacker to perform cross-site scripting attacks, enablin...

PT-2020-3406 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A cross-site scripting issue exist...

PT-2020-2753

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue is related to an elevation of privilege vulnerability. It occurs when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication...

PT-2020-3360

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description A spoofing issue exists due to improper sanitization of specially crafted web requests. This could allow a remote attacker to perform cross-site scripting attacks by sendi...

PT-2020-2848

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description The issue is related to insufficient access controls in Microsoft SharePoint, allowing a remote...

PT-2020-2944

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description The issue is related to insufficient...