CVE-2018-0789: Undefined Security Weakness

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0790...

CVE-2018-0790: Undefined Security Weakness

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0789...

PT-2018-9070

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Foundation 2010 Microsoft SharePoint Server 2013 Microsoft SharePoint Server 2016 Description: An elevation of privilege issue exists due to improper sanitization of specially crafted web requests to affected SharePoint...

PT-2015-5430

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2007 SP3 Microsoft SharePoint Foundation 2010 SP2 Microsoft SharePoint Server 2010 SP2 Microsoft SharePoint Foundation 2013 SP1 Description The issue allows remote authenticated users to execute arbitrary code via...

CVE-2015-1633: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Foundation 2013 Gold and SP1, and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka...

PT-2015-5406

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation 2010 SP2 Microsoft SharePoint Server 2010 SP2 Microsoft SharePoint Foundation 2013 Gold and SP1 Microsoft SharePoint Server 2013 Gold and SP1 Description The issue allows remote authenticated users to inject...

PT-2014-5699

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation 2010 SP2 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via a modified list. This is also referred to a...

CVE-2014-4116: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2010 SP2 allows remote authenticated users to inject arbitrary web script or HTML via a modified list, aka "SharePoint Elevation of Privilege Vulnerability."...

PT-2013-2089

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 SP1 Microsoft SharePoint Foundation 2010 SP1 Description A buffer overflow issue allows remote attackers to cause a denial of service by crashing the W3WP process and causing a site outage via a crafted URL. Th...

PT-2013-2088

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 SP1 Microsoft SharePoint Foundation 2010 SP1 Description The issue allows remote attackers to bypass intended read restrictions for content and hijack user accounts via a crafted URL. An elevation of privilege...

PT-2013-2084

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 SP1 Microsoft SharePoint Foundation 2010 SP1 Description The issue allows remote attackers to bypass intended read restrictions for content and hijack user accounts via a crafted URL. An elevation of privilege...

PT-2012-3602

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 versions Gold through SP1 Microsoft SharePoint Foundation 2010 versions Gold through SP1 Microsoft Office Web Apps 2010 versions Gold through SP1 Description The issue allows remote attackers to inject arbitrar...

PT-2012-3604

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 versions Gold through SP1 Microsoft SharePoint Foundation 2010 versions Gold through SP1 Microsoft Office Web Apps 2010 versions Gold through SP1 Description A cross-site scripting issue exists, allowing remote...

CVE-2012-0017

CVE-2012-0017 is an XSS in Microsoft SharePoint Foundation 2010 Gold/SP1 via inplview.aspx. The underlying issue is improper handling of JavaScript sequences in a URL, allowing remote attackers to inject arbitrary script/HTML. Affected product/version: SharePoint Foundation 2010 (Gold/SP1). Docum...

PT-2012-2346

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2010 versions Gold and SP1 Microsoft SharePoint Foundation 2010 versions Gold and SP1 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via...

PT-2012-2347

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2010 versions Gold and SP1 Microsoft SharePoint Foundation 2010 versions Gold and SP1 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via...

PT-2012-2243

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation 2010 Gold and SP1 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL. This could result in information disclosure ...

CVE-2012-0017: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in inplview.aspx Vulnerability."...

PT-2011-2531

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2010 versions Gold and SP1 Microsoft SharePoint Foundation 2010 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the URI. This could...

PT-2011-3451

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2010 Microsoft SharePoint Foundation 2010 Description A cross-site scripting vulnerability exists, allowing remote attackers to inject arbitrary web script or HTML via a post. This vulnerability can also lead...