CVE-2019-0957

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0958...

CVE-2019-0957

CVE-2019-0957 is an elevation-of-privilege vulnerability in Microsoft SharePoint Server caused by improper sanitization of specially crafted web requests. The issue allows network-remote attack with low complexity to gain high-privilege access; CVSS v3 base score 8.8 (C:H/I:H/A:H) per NVD data. T...

CVE-2019-0958

The provided documents describe CVE-2019-0958 as an elevation-of-privilege vulnerability in Microsoft SharePoint Server caused by improper sanitization of specially crafted web requests. Affected product: SharePoint Server. Root cause: failure to sanitize web input leading to privilege escalation...

CVE-2019-0958

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0957...

CVE-2019-0952

CVE-2019-0952 is a remote code execution vulnerability in Microsoft SharePoint Server caused by failure to properly identify and filter unsafe ASP.NET web controls. Exploitation path involves sending a crafted page that executes in the SharePoint application pool’s security context, with authenti...

CVE-2019-0951

CVE-2019-0951 is a spoofing vulnerability in Microsoft SharePoint Server where a specially crafted web request is not properly sanitized. It is distinct from CVE-2019-0949/0950. The CVSS v3 base score is 5.4 (Medium); attack vector NETWORK and user interaction is required. Connected sources do no...

CVE-2019-0950

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0951...

CVE-2019-0949

CVE-2019-0949 is a spoofing vulnerability in Microsoft SharePoint Server arising from improper sanitization of specially crafted web requests. Connected sources confirm this vulnerability family and link it to SharePoint Server, including a Nessus entry for SharePoint Server 2019 (builds

CVE-2019-0951

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0950...

CVE-2019-0956

CVE-2019-0956 is described across connected sources as an information disclosure in Microsoft SharePoint Server caused by improper sanitization of specially crafted web requests. The published remediation is a security update (MS19-4464564 family) that addresses SharePoint Server web-request sani...

CVE-2019-0950

The connected Nessus findings identify CVE-2019-0950 as a Spoofing vulnerability in Microsoft SharePoint Server , arising from the product’s failure to properly sanitize a specially crafted web request. Affected software includes SharePoint Server 2019 (builds older than 16.0.10345.12101) and Sha...

CVE-2019-0952

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'...

CVE-2019-0956

An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Server Information Disclosure Vulnerability'...

CVE-2019-0949

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0950, CVE-2019-0951...

Security Updates for Microsoft SharePoint Server (May 2019)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-25043)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2019-34774)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A vulnerability exist...

Microsoft SharePoint Spoofing Vulnerability (CNVD-2019-39029)

Microsoft SharePoint is a browser-based collaboration and document management platform. A spoofing vulnerability exists in Microsoft SharePoint. An attacker could exploit this vulnerability by sending a specially crafted web request to conduct a cross-site scripting attack, which could run script...

Microsoft SharePoint Spoofing Vulnerability (CNVD-2019-39024)

Microsoft SharePoint is a browser-based collaboration and document management platform. A spoofing vulnerability exists in Microsoft SharePoint. An attacker could exploit this vulnerability by sending a specially crafted web request to conduct a cross-site scripting attack, which could run script...

Microsoft SharePoint Server Information Disclosure Vulnerability (CNVD-2019-39023)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...