CVE-2020-16941

CVE-2020-16941 describes an information-disclosure vulnerability in Microsoft SharePoint Server where, on certain pages, the server improperly discloses the folder structure by revealing the folder path of scripts loaded on the page. An attacker must have access to the affected SharePoint page to...

CVE-2020-16941 Microsoft SharePoint Information Disclosure Vulnerability

...

Security Updates for Microsoft SharePoint Server 2010 (October 2020)

The Microsoft SharePoint Server 2010 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request ...