9022 matches found
CVE-2020-1576
CVE-2020-1576 is a remote code execution vulnerability in Microsoft SharePoint. According to the provided sources, the flaw occurs when SharePoint fails to validate the source markup of an application package uploaded to an affected SharePoint version, allowing an attacker to execute arbitrary co...
CVE-2020-1576 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2020-1575 Microsoft Office SharePoint XSS Vulnerability
...
CVE-2020-1575
The CVE-2020-1575 entry describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of crafted web requests. An authenticated attacker can exploit this by sending a specially crafted request to an affected SharePoint server, enabling XSS in ...
CVE-2020-1523 Microsoft SharePoint Server Tampering Vulnerability
...
CVE-2020-1523 Microsoft SharePoint Server Tampering Vulnerability
...
CVE-2020-1523
CVE-2020-1523 is a tampering vulnerability in Microsoft SharePoint Server related to how profile data is processed. An authenticated attacker can modify a targeted user’s profile data by sending a specially crafted request to the affected SharePoint Server. The issue is addressed by a security up...
CVE-2020-1514 Microsoft Office SharePoint XSS Vulnerability
...
CVE-2020-1514
CVE-2020-1514 relates to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server. The issue arises when SharePoint does not properly sanitize a crafted web request, allowing an authenticated attacker to execute script in the user’s browser context, potentially reading restricted...
CVE-2020-1482 Microsoft Office SharePoint XSS Vulnerability
...
CVE-2020-1482
CVE-2020-1482 is a Microsoft SharePoint Server XSS vulnerability. An authenticated attacker can send a crafted web request to an affected SharePoint server, causing the server to execute script in the context of the current user. Impact statements from the sources indicate the attacker could read...
CVE-2020-1460
CVE-2020-1460 is a Microsoft SharePoint Server Remote Code Execution vulnerability. The issue occurs when SharePoint Server fails to properly identify and filter unsafe ASP.Net web controls; an authenticated attacker can craft and invoke a malicious page to execute actions in the SharePoint appli...
CVE-2020-1460 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2020-1453 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2020-1453
CVE-2020-1453 is a remote code execution vulnerability in Microsoft SharePoint. It occurs when SharePoint fails to validate the source markup of an application package uploaded to affected SharePoint versions, allowing an attacker to execute arbitrary code in the SharePoint application pool and s...
CVE-2020-1452 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2020-1452 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2020-1452
CVE-2020-1452 — SharePoint RCE : A remote code execution vulnerability where SharePoint fails to validate the source markup of application packages. Exploitation requires a user-uploaded, specially crafted SharePoint app package, allowing arbitrary code execution in the SharePoint application poo...
CVE-2020-1440
CVE-2020-1440 describes a tampering vulnerability in Microsoft SharePoint Server where an authenticated attacker can modify a targeted user’s profile data by sending a specially crafted request. The root cause is SharePoint’s improper handling of profile data. The impact, as stated, is the abilit...