CVE-2020-1345 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1345

CVE-2020-1345 corresponds to a Microsoft SharePoint Server XSS vulnerability. The issue arises when SharePoint Server fails to sanitize certain crafted web requests, enabling an authenticated attacker to execute scripts in the user’s browser and potentially read restricted content, perform action...

CVE-2020-1227

CVE-2020-1227 is a Microsoft SharePoint Server XSS vulnerability caused by improper sanitization of crafted web requests. An authenticated attacker can send a specially crafted request to an affected SharePoint server, enabling cross-site scripting and script execution in the user’s browser with ...

CVE-2020-1227 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1205 Microsoft SharePoint Spoofing Vulnerability

...

CVE-2020-1210 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1205

CVE-2020-1205 affects Microsoft SharePoint Server. The vulnerability arises from improper sanitization of crafted web requests, enabling an authenticated attacker who can reach an affected SharePoint server to perform cross-site scripting and execute scripts in the user’s security context. This c...

CVE-2020-1210

CVE-2020-1210 affects Microsoft SharePoint. A remote code execution flaw arises when SharePoint fails to validate the source markup of an application package; an attacker must have a user upload a crafted SharePoint app package to an affected SharePoint version. The impact is arbitrary code execu...

CVE-2020-1200 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1198 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1200

CVE-2020-1200 is a Microsoft SharePoint remote code execution vulnerability. It arises when SharePoint fails to properly check the source markup of an uploaded application package, allowing an attacker to execute arbitrary code within the SharePoint application pool context after a user uploads a...

CVE-2020-1198 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1198

CVE-2020-1198 is a Microsoft SharePoint Server XSS vulnerability where a crafted request to an affected SharePoint server is not properly sanitized. An authenticated attacker could execute scripts in the user’s browser, access data they aren’t authorized to read, and perform actions in the user’s...

Security Updates for Microsoft SharePoint Server (September 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package...

Security Updates for Microsoft SharePoint Server 2013 (September 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package...

CVE-2020-1210

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...

Security Updates for Microsoft SharePoint Server 2016 (September 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package...

Security Updates for Microsoft SharePoint Server 2019 (September 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-57797)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-63723)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...