Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-32105)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-32097)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-32104)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-32101)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-32102)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-32107)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server arises from the lack of measures taken to protect the structure of web pages. This allows attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending a specially crafted request t...

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of restrictions on file downloads, which allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by downloading a specially created SharePoint application...

Description of the security update for SharePoint Server 2019: May 12, 2020

None None...

Description of the security update for SharePoint Enterprise Server 2013: May 12, 2020

None None...

Description of the security update for SharePoint Server 2010: May 12, 2020

Description of the security update for SharePoint Server 2010: May 12, 2020 Summary This security update resolves a cross-site-scripting XSS vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

KLA11774 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability Microsoft Office...

Security Updates for Microsoft SharePoint Server (May 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an...

PT-2020-2458

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description A remote code execution issue exists due to the failure to properly identify and filter unsafe ASP.Net web controls. This could allow an authenticated attacker to perform...

PT-2020-2478

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description The issue is related to a spoofing...

PT-2020-2834

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description The issue is related to a lack of restrictions on file uploads in Microsoft SharePoint Server and...

PT-2020-2466

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description An information disclosure issue exists due to certain modes of the search function in Microsoft SharePoint Server being vulnerable to cross-site search attacks, a variant ...

PT-2020-2481

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue is related to a spoofing vulnerability that occurs when Microsoft SharePoint Server does not properly sanitize a specially crafted web request. An authenticated...