CVE-2022-45910

Improper neutralization of special elements used in an LDAP query 'LDAP Injection' vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries DoS, additional queries, filter manipulation during...

CVE-2022-45910

Improper neutralization of special elements used in an LDAP query 'LDAP Injection' vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries DoS, additional queries, filter manipulation during...

Design/Logic Flaw

Improper neutralization of special elements used in an LDAP query 'LDAP Injection' vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries DoS, additional queries, filter manipulation during...

CVE-2022-45910

Improper neutralization of special elements used in an LDAP query 'LDAP Injection' vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries DoS, additional queries, filter manipulation during...

CVE-2022-45910

The CVE-2022-45910 entry corresponds to an LDAP Injection vulnerability in Apache ManifoldCF’s ActiveDirectory and Sharepoint ActiveDirectory connectors. The root cause is improper neutralization of special LDAP elements when username or domain strings are passed to the UserACLs servlet during us...

CVE-2022-45910: Improper Neutralization of Special Elements used in an LDAP Query

Improper neutralization of special elements used in an LDAP query 'LDAP Injection' vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries DoS, additional queries, filter manipulation during...

Apache ManifoldCF 注入漏洞

Apache ManifoldCF is an open source framework of the United States Apache Apache Foundation . It is used to connect a source content repository to a target repository or index. An injection vulnerability exists in Apache ManifoldCF version 2.23 and earlier, which stems from improper neutralizatio...

U.S. Dept Of Defense: Reflective Cross Site Scripting (XSS) on ███████/Pages

Summary: A reflection cross-site scripting XSS vulnerability was discovered in Microsoft SharePoint Server. The vulnerability was caused by improper sanitization of a web request to an affected SharePoint server. The vulnerability could have been exploited by an authenticated attacker to execute...

Microsoft SharePoint Code Execution

The vulnerability of the Microsoft SharePoint software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Office Code Execution

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Microsoft Office Data Protection Unauthenticated Access

The vulnerabilities of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server are related to the lack of protection for sensitive data. Exploiting these vulnerabilities can allow attackers to gain unauthorized acce...

SharePoint Information Representation Spear Phishing

The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server relates to information display errors in the user interface. Exploiting this vulnerability can allow an attacker to perform spear-phishing attacks remotely...

CVE-2022-38167

The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...

CVE-2022-38167

The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...

Cross site scripting

The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...

CVE-2022-38167: Improper Neutralization of Input During Web Page Generation

The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...

Nintex Workflow plugin SharePoint 跨站脚本漏洞

Nintex Workflow plugin is a workflow designer plugin from Nintex Corporation, USA. A security vulnerability exists in Nintex Workflow plugin SharePoint version 5.2.2.30, which originates from a vulnerability that allows attackers to implement cross-site scripting...

CVE-2022-38167

The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...

CVE-2022-38167

The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS...

PT-2022-24253

Name of the Vulnerable Software and Affected Versions Nintex Workflow plugin version 5.2.2.30 for SharePoint Description The issue allows for Cross-Site Scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website. This can lead to unauthorized access or...