Remote code execution

A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm...

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

CVE-2020-1595 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1595 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1595

CVE-2020-1595 is a Microsoft SharePoint remote code execution vulnerability. The issue arises from unsafe deserialization of untrusted data by SharePoint APIs, allowing an attacker to run arbitrary code in the SharePoint application pool and farm account if they can access a susceptible API with ...

CVE-2020-1576

CVE-2020-1576 is a remote code execution vulnerability in Microsoft SharePoint. According to the provided sources, the flaw occurs when SharePoint fails to validate the source markup of an application package uploaded to an affected SharePoint version, allowing an attacker to execute arbitrary co...

CVE-2020-1576 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1575 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1575

The CVE-2020-1575 entry describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of crafted web requests. An authenticated attacker can exploit this by sending a specially crafted request to an affected SharePoint server, enabling XSS in ...

CVE-2020-1523 Microsoft SharePoint Server Tampering Vulnerability

...

CVE-2020-1523 Microsoft SharePoint Server Tampering Vulnerability

...

CVE-2020-1523

CVE-2020-1523 is a tampering vulnerability in Microsoft SharePoint Server related to how profile data is processed. An authenticated attacker can modify a targeted user’s profile data by sending a specially crafted request to the affected SharePoint Server. The issue is addressed by a security up...

CVE-2020-1514 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1514

CVE-2020-1514 relates to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server. The issue arises when SharePoint does not properly sanitize a crafted web request, allowing an authenticated attacker to execute script in the user’s browser context, potentially reading restricted...

CVE-2020-1482 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1482

CVE-2020-1482 is a Microsoft SharePoint Server XSS vulnerability. An authenticated attacker can send a crafted web request to an affected SharePoint server, causing the server to execute script in the context of the current user. Impact statements from the sources indicate the attacker could read...

CVE-2020-1460 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2020-1460

CVE-2020-1460 is a Microsoft SharePoint Server Remote Code Execution vulnerability. The issue occurs when SharePoint Server fails to properly identify and filter unsafe ASP.Net web controls; an authenticated attacker can craft and invoke a malicious page to execute actions in the SharePoint appli...

CVE-2020-1453 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1453

CVE-2020-1453 is a remote code execution vulnerability in Microsoft SharePoint. It occurs when SharePoint fails to validate the source markup of an application package uploaded to affected SharePoint versions, allowing an attacker to execute arbitrary code in the SharePoint application pool and s...