CVE-2020-1106 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1105 Microsoft SharePoint Spoofing Vulnerability

...

CVE-2020-1105

CVE-2020-1105 is a spoofing vulnerability affecting Microsoft SharePoint Server, caused by improper sanitization of a specially crafted web request. The linked sources (NVD entry and CVE records) consistently identify this as a spoofing issue distinct from CVE-2020-1104/1107. The available docume...

CVE-2020-1107 Microsoft SharePoint Spoofing Vulnerability

...

CVE-2020-1106

CVE-2020-1106 corresponds to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server, where improper sanitization of a crafted web request can lead to an XSS condition on the affected server. The NVD entry notes a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, User...

CVE-2020-1104

Technical details about CVE-2020-1104 are not publicly provided in the supplied documents. Monitor for updates from vendors and ENISA/NVD for confirmed fixes and affected products.

CVE-2020-1104 Microsoft SharePoint Spoofing Vulnerability

...

CVE-2020-1103 Microsoft SharePoint Information Disclosure Vulnerability

...

CVE-2020-1103

CVE-2020-1103 is an information-disclosure vulnerability in Microsoft SharePoint Server. The issue affects how certain search modes handle CSRF-like browser behavior: when a logged-in user visits a malicious page, the browser can issue search queries on behalf of the user. The impact, as describe...

CVE-2020-1101 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1101 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1102

CVE-2020-1102 is a remote code execution vulnerability in Microsoft SharePoint where the product fails to check the source markup of an application package. Connected Nessus entries indicate affected suites include: Microsoft SharePoint Server 2016 < 16.0.5005.1000 (multiple vulnerabilities in...

CVE-2020-1102 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1101

CVE-2020-1101 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server where the application does not properly sanitize a specially crafted web request. The issue affects SharePoint Server (per the CVE) and is corroborated by connected sources noting XSS in SharePoint S...

CVE-2020-1100 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1100 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1099 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1099 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1099

CVE-2020-1099 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. The provided documents identify the vulnerability type and affected product (Microsoft SharePoint Server) but do not specify affect...

CVE-2020-1100

CVE-2020-1100 is an XSS vulnerability in Microsoft SharePoint Server where improper sanitization of a specially crafted web request can lead to compromised data in affected SharePoint deployments. The vulnerability affects SharePoint Server components handling input to web requests; CVSS v3.1 vec...