222 matches found
Microsoft Exchange Server cross-site scripting vulnerability
Microsoft Exchange Server is a set of email service programs provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. Microsoft Exchange Server has a cross-site scripting vulnerability. Attackers utilize thi...
Microsoft Office SharePoint Server cross-site scripting vulnerability
Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. Microsoft Office SharePoint has a cross-site scripting vulnerability. Attackers exploit this vulnerability to carry out cross-site scripting attacks. The followi...
Security Updates for Microsoft SharePoint Server Subscription Edition (June 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an...
Microsoft SharePoint Server Deserialization RCE
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
Microsoft has rolled out updates to fix a remote code execution vulnerability impacting SharePoint that could be exploited by bad actors in attacks without requiring any specialized conditions to be met. The vulnerability, tracked as CVE-2026-45659 , carries a CVSS score of 8.8. It has been...
Microsoft SharePoint code-related vulnerabilities
Microsoft SharePoint is a corporate business collaboration platform developed by Microsoft Corporation in the United States. This platform is used for integrating business information and enabling sharing of work, collaboration with others, organization of projects and teams, as well as searching...
Microsoft SharePoint code-related vulnerabilities
Microsoft SharePoint is a corporate business collaboration platform developed by Microsoft Corporation in the United States. This platform is used for integrating business information and enabling sharing of work, collaboration with others, organization of projects and teams, as well as searching...
Microsoft SharePoint code-related vulnerabilities
Microsoft SharePoint is a corporate business collaboration platform developed by Microsoft Corporation in the United States. This platform is used for integrating business information and enabling sharing of work, collaboration with others, organization of projects and teams, as well as searching...
Microsoft SharePoint code-related vulnerabilities
Microsoft SharePoint is a corporate business collaboration platform developed by Microsoft Corporation in the United States. This platform is used for integrating business information and enabling sharing of work, collaboration with others, organization of projects and teams, as well as searching...
Microsoft SharePoint code-related vulnerabilities
Microsoft SharePoint is a corporate business collaboration platform developed by Microsoft Corporation in the United States. This platform is used for integrating business information and enabling sharing of work, collaboration with others, organization of projects and teams, as well as searching...
Security Updates for Microsoft SharePoint Server Subscription Edition (May 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution CVE-2026-33112, CVE-2026-33110, CVE-2026-35439, CVE-2026-40357, CVE-2026-40368, CVE-2026-45659 Note tha...
Microsoft SharePoint Server Security Issue
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server Subscription Edition, SharePoint Server, and SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Description of the security update for SharePoint Server Subscription Edition: March 10, 2026 (KB5002843)
None None...
Description of the security update for SharePoint Server Subscription Edition: February 10, 2026 (KB5002833)
None None...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: February 10, 2026 (KB5074992)
None None...
Microsoft Exchange Server security vulnerabilities
Microsoft Exchange Server is a email service program provided by the American company Microsoft. It offers features such as email access, storage, forwarding, voicemail handling, and email filtering. There are security vulnerabilities in Microsoft Exchange Server. Attackers use these...
Description of the security update for SharePoint Server Subscription Edition: January 13, 2026 (KB5002822)
None None...
Microsoft SharePoint input validation vulnerability
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing work, collaborating with others, organizing projects and workgroups, and searching for people and information. An input validation erro...
Microsoft SharePoint SQL injection vulnerability
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing work, collaborating with others, organizing projects and workgroups, and searching for people and information. An SQL injection...