The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to carry out spoofing attacks.

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to carry out spear-phishing attacks remotely...

CVE-2020-0837

An elevation of privilege vulnerability exists when Active Directory Federation Services ADFS improperly handles multi-factor authentication requests. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication factors. To exploit this...

CVE-2020-0837

An elevation of privilege vulnerability exists when Active Directory Federation Services ADFS improperly handles multi-factor authentication requests. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication factors. To exploit this...

PT-2020-3916 · Microsoft · Active Directory Federation Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Federation Services ADFS affected versions not specified Description: An elevation of privilege issue exists due to improper handling of multi-factor authentication requests by Active Directory Federation Services ADFS. This...

The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of Active Directory Federation Services ADFS on Windows operating systems is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request...

CVE-2020-1055

A cross-site-scripting XSS vulnerability exists when Active Directory Federation Services ADFS does not properly sanitize user inputs, aka 'Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability'...

CVE-2020-1055 Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability

...

CVE-2020-1055 Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability

...

Microsoft Dynamics CRM 2011 Update Rollup 13

Microsoft Dynamics CRM 2011 Update Rollup 13 INTRODUCTION Update Rollup 13 for Microsoft Dynamics CRM 2011 is now available. This article describes the hotfixes and updates that are included in this update rollup. This update rollup is available for all languages that are supported by Microsoft...

Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability

A cross-site-scripting XSS vulnerability exists when Active Directory Federation Services ADFS does not properly sanitize user inputs. An un-authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected ADFS server. The attacker who successfully...

KLA11773 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of...

PT-2020-2343 · Microsoft · Active Directory Federation Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Federation Services ADFS affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This occurs when Active Directory Federation Services ADFS does not properly sanitize use...

KB4551853: Windows 10 Version 1809 and Windows Server 2019 May 2020 Security Update

The remote Windows host is missing security update 4551853. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a...

June 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2

June 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Important When you install this update 2962409 from Windows Update, updates 2959146, 2973448, and 2980654 are included in the installation. The June 2014 Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2...

CVE-2019-1273

A cross-site-scripting XSS vulnerability exists when Active Directory Federation Services ADFS does not properly sanitize certain error messages, aka 'Active Directory Federation Services XSS Vulnerability'...

CVE-2019-1273

A cross-site-scripting XSS vulnerability exists when Active Directory Federation Services ADFS does not properly sanitize certain error messages, aka 'Active Directory Federation Services XSS Vulnerability'...

CVE-2019-1273

CVE-2019-1273 is an XSS vulnerability in Active Directory Federation Services (ADFS) where error messages are not properly sanitized. The connected documents consistently describe a cross-site scripting issue tied to ADFS error handling, but do not provide specifics on affected product versions, ...

Microsoft Windows Multiple Vulnerabilities (KB4516058)

This host is missing a critical security update according to Microsoft KB4516058 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

KLA11552 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, obtain sensitive information, spoof user interface, execute arbitrary code, bypass security restrictions. Below is a complete list of...

CVE-2019-1126

A security feature bypass vulnerability exists in Active Directory Federation Services ADFS which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password...