4128 matches found
Privilege escalation
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft Project Server, Microsoft SharePoint...
CVE-2018-8254
Root cause: elevation of privilege in Microsoft SharePoint Server due to improper filtering of certain web requests. Affected products include SharePoint Server and Project Server (e.g., SharePoint Enterprise Server 2016 and SharePoint Foundation 2013 SP1 per CNVD entries). CVSS metrics indicate ...
CVE-2018-8254: Improper Neutralization of Input During Web Page Generation
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft Project Server, Microsoft SharePoint...
Microsoft SharePoint Server 2010 Service Pack 2 Word Automation Services Defense in Depth (KB4022197)
This host is missing a defense-in-depth update according to Microsoft KB4022197 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Description of the security update for SharePoint Server 2010 Office Web Apps: June 12, 2018
Description of the security update for SharePoint Server 2010 Office Web Apps: June 12, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities,...
Description of the security update for SharePoint Enterprise Server 2013: June 12, 2018
None None...
Description of the security update for SharePoint Server 2010: June 12, 2018
Description of the security update for SharePoint Server 2010: June 12, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
PT-2018-18515
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description An elevation of privilege issue exists due to improper sanitization of specially crafted web requests. An authenticated attacker can exploit this by sending a crafted...
KLA11267 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information or execute arbitrary code. Below is a complete list of vulnerabilities: 1. An incorrect handling of requests in Microsoft...
Microsoft SharePoint Server CVE-2018-8252 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...
Security Updates for Microsoft Sharepoint Server (June 2018)
The Microsoft Sharepoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an...
PT-2018-18516
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft Project Server affected versions not specified Description An elevation of privilege issue exists due to improper sanitization of specially crafted web requests to affected...
Microsoft SharePoint Server CVE-2018-8254 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...
Microsoft SharePoint Server Elevation of Privilege Vulnerability (CNVD-2018-11000)
Microsoft SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, and SharePoint Server 2010 SP2 are enterprise business collaboration platforms from Microsoft Corporation USA used for the integration of Access is one of the database components. A privileged access vulnerability...
Microsoft SharePoint Server Remote Elevation of Privilege Vulnerability (CNVD-2018-11552)
Microsoft Project Server 2010 SP2, Project Server 2013 SP1, and SharePoint Enterprise Server 2016 are products of Microsoft Corporation.Microsoft Project Server 2010 SP2 and Project Server 2013 SP1 are project management solutions for project portfolio management PPM and day-to-day work. SP2 and...
Microsoft SharePoint Server Remote Elevation of Privilege Vulnerability (CNVD-2018-11553)
Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Server 2010 SP2 are both Microsoft enterprise business collaboration platforms for consolidating business information and enabling you to share work, collaborate with others, organize projects and workgroups, and search for people and...
CVE-2018-8156
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint, Microsoft Project Server...
CVE-2018-8155
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...
CVE-2018-8149
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...
CVE-2018-8168
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...