4128 matches found
PT-2017-18456
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 Service Pack 2 Description A cross-site scripting XSS issue exists due to improper sanitization of specially crafted web requests to affected SharePoint servers. An authenticated attacker could exploit this by...
CVE-2017-8654: Improper Neutralization of Input During Web Page Generation
Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting XSS vulnerability when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability"...
Security Update for Microsoft SharePoint Server 2010 (August 2017)
The Microsoft SharePoint Server installed on the remote Windows host is missing security update 2956077. It is, therefore, affected by a cross-site scripting XSS vulnerability when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint...
Vulnerability of Microsoft Office Online Server, Microsoft Excel Viewer, Microsoft Office Compatibility Pack, Microsoft SharePoint Server, Microsoft Office, and Microsoft Excel, allowing a perpetrator to execute arbitrary code
The vulnerabilities of Microsoft Office Online Server, Microsoft Excel Viewer, Microsoft Office Compatibility Pack, Microsoft SharePoint Server, Microsoft Office, and Microsoft Excel are related to object handling in memory. Exploitation of these vulnerabilities can allow a malicious actor to...
Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2017-22663)
Microsoft SharePoint Enterprise Server is a portal site that enables organizations to develop intelligent portal sites that seamlessly connect to users. A security vulnerability in Microsoft SharePoint Enterprise Server's filtering of incoming malicious web requests allows an attacker to exploit...
Microsoft SharePoint Server 2010 Excel Services Remote Code Execution Vulnerability (KB3191902)
This host is missing an important security update according to Microsoft KB3191902 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2017-8569
Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...
Privilege escalation
Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...
CVE-2017-8569
Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...
Description of the security update for Excel Services on SharePoint Server 2010: July 11, 2017
Description of the security update for Excel Services on SharePoint Server 2010: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilitie...
Description of the security update for SharePoint Server 2010 Office Web Apps: July 11, 2017
Description of the security update for SharePoint Server 2010 Office Web Apps: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities,...
Description of the security update for SharePoint Server 2016: July 11, 2017
None None...
Description of the security update for SharePoint Server 2013: July 11, 2017
Description of the security update for SharePoint Server 2013: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
Microsoft SharePoint Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Description of the security update for SharePoint Server 2010: July 11, 2017
Description of the security update for SharePoint Server 2010: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
PT-2017-18417
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue arises from the way Microsoft SharePoint Server sanitizes specially crafted web requests, leading to an elevation of privilege. This could allow an attacker to...
Microsoft SharePoint Server CVE-2017-8569 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attackers may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microso...
CVE-2017-8569: Improper Neutralization of Input During Web Page Generation
Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...
KLA11069 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges and spoof user interface. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities related to improper handling of...
Security Update for Microsoft Office Online Server and SharePoint Server 2010 Office Web Apps (July 2017)
The Microsoft Office Online Server or SharePoint Server 2010 Office Web Apps installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. An unauthenticated, remote...