Description of the security update for SharePoint Server 2010: March 12, 2019

Description of the security update for SharePoint Server 2010: March 12, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft SharePoint if the software does not check the source markup of an application package. To learn more about the...

PT-2019-1402

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Description A remote code execution issue exists...

Microsoft SharePoint Server CVE-2019-0670 Spoofing Vulnerability

Description Microsoft SharePoint Server is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft...

Microsoft SharePoint Server CVE-2019-0594 Remote Code Execution Vulnerability

Description Microsoft SharePoint Server is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft SharePoint Enterprise Server 2016...

Microsoft SharePoint Server CVE-2019-0668 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Microso...

PT-2019-1543

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue arises from Microsoft SharePoint Server's failure to properly sanitize specially crafted web requests, allowing for elevation of privilege. An authenticated...

Vulnerabilities of Microsoft Office packages, Office Online Server, Office Web Apps Server, Office Word Viewer, SharePoint Enterprise Server, SharePoint Server, Word, and Office 365, related to memory object processing errors, allow attackers to execute arbitrary code.

The vulnerability of Microsoft Office packages, Office Online Server, Office Web Apps Server, Office Word Viewer, SharePoint Enterprise Server, SharePoint Server, Word, and Office 365 exists due to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to...

The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request to the vulnerable...

The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request to the vulnerable...

The vulnerability of the SharePoint Server software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the SharePoint Server software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request to the vulnerable SharePoint server...

The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted requests to the vulnerable...

Microsoft Office SharePoint Server 2016 - Denial of Service (Metasploit)

Microsoft Office SharePoint Server 2016 - Denial of Service Metasploit This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sharepoint-ruby' class MetasploitModule 'DOS Vulnerability in SharePoint 2016 Server',...

Microsoft Office SharePoint Server 2016 - Denial of Service Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sharepoint-ruby' class MetasploitModule 'DOS Vulnerability in SharePoint 2016 Server', 'Description' = %q A vulnerability in Microsoft SharePoint Server could...

Microsoft Office SharePoint Server 2016 Denial Of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sharepoint-ruby' class MetasploitModule 'DOS Vulnerability in SharePoint 2016 Server', 'Description' = %q A vulnerability in Microsoft SharePoint Server could...

Security Updates for Microsoft Sharepoint Server (January 2019)

The Microsoft Sharepoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who...

Microsoft Office SharePoint Server 2016 - Denial of Service (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sharepoint-ruby' class MetasploitModule 'DOS Vulnerability in SharePoint 2016 Server', 'Description' = %q A vulnerability in Microsoft SharePoint Server could...

CVE-2019-0585

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint,...

CVE-2019-0562

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...

CVE-2019-0557

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from...

CVE-2019-0558

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint,...