4130 matches found
Microsoft SharePoint Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker who successfully exploited the vulnerability could use a specially crafted page to perform actions in the security conte...
Microsoft SharePoint Spoofing Vulnerability
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...
Microsoft SharePoint Server Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Microsoft SharePoint Server CVE-2019-0963 Cross Site Scripting Vulnerability
Description Microsoft SharePoint Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
Microsoft SharePoint Server CVE-2019-0956 Information Disclosure Vulnerability
Description Microsoft SharePoint Server is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Microsoft SharePoint...
PT-2019-2255 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Server affected versions not specified Description: A cross-site scripting issue exists due to inadequate protection of the web page structure. This can be...
Microsoft SharePoint Server CVE-2019-0952 Remote Code Execution Vulnerability
Description Microsoft SharePoint Server is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft SharePoint Enterprise Server 2016...
Microsoft SharePoint Server CVE-2019-0949 Spoofing Vulnerability
Description Microsoft SharePoint Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft...
PT-2019-2250
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description An elevation of privilege issue exists due to improper sanitization of specially crafted web requests to affected SharePoint servers. This could allow an attacker to perfo...
PT-2019-2240
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue is related to the lack of input sanitization in Microsoft SharePoint Server, which can be exploited by a remote attacker to perform cross-site scripting attacks...
PT-2019-2246
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description A remote code execution issue exists due to the failure of Microsoft SharePoint Server to properly identify and filter unsafe ASP.Net web controls. This could allow an...
PT-2019-2249
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue arises from Microsoft SharePoint Server's failure to properly sanitize specially crafted web requests, allowing an attacker to perform cross-site scripting attac...
PT-2019-2245
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Server affected versions not specified Description The issue arises due to insufficient input validation, allowing a remote attacker to perform cross-site...
CVE-2019-0831
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0830...
CVE-2019-0830
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831...
Cross site scripting
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0830...
CVE-2019-0830
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831...
Description of the security update for SharePoint Enterprise Server 2013: April 9, 2019
None None...
Description of the security update for SharePoint Server 2010: April 9, 2019
Description of the security update for SharePoint Server 2010: April 9, 2019 Summary This security update resolves a cross-site–scripting XSS vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request that's made to an affected SharePoint...