PT-2017-12259

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description A cross-site scripting issue exists due to improper sanitization of specially crafted web requests. This could allow an attacker to perform cross-site scripting attacks,...

KLA11113 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information perform cross-site scripting and privilege escalations Below is a complete list of vulnerabilities: 1. Multiple...

PT-2017-12237

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description A cross-site scripting issue exists due to improper sanitization of specially crafted web requests. An authenticated attacker can exploit this by sending a crafted request...

CVE-2017-8742: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint Viewer 2007, Microsoft...

CVE-2017-8629: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint XSS Vulnerability"...

Microsoft SharePoint Server 2010 Excel Services Remote Code Execution Vulnerability (KB4011056)

This host is missing an important security update according to Microsoft KB4011056 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2017-18447

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2013 Service Pack 1 Description The issue arises when Microsoft SharePoint Server fails to properly sanitize a specially crafted web request to an affected SharePoint server. This allows an attacker to perform...

PT-2017-18504

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint 2007 Service Pack 3 Microsoft PowerPoint 2010 Service Pack 2 Microsoft PowerPoint 2013 Service Pack 1 Microsoft PowerPoint 2013 RT Service Pack 1 Microsoft PowerPoint 2016 Microsoft PowerPoint Viewer 2007 Microsoft...

Microsoft SharePoint Server CVE-2017-8629 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attackers may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microso...

PT-2017-18506

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft SharePoint Server affected versions not specified Description The issue arises from improper sanitization of specially crafted web requests to an affected SharePoint server. An...

Security Updates for Microsoft Sharepoint Server (September 2017)

The Microsoft Sharepoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who...

Microsoft SharePoint Server Information Disclosure Vulnerability (2827663)

This host is missing an important security update according to Microsoft Bulletin MS13-030 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

CVE-2017-8654

Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting XSS vulnerability when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability"...

KLA11089 XSS vulnerability in Microsoft Sharepoint Server

An XSS cross-site scripting vulnerability related to an improper sanitizing of web requests was found in Microsoft SharePoint Server. By exploiting this vulnerability malicious users can spoof user interaface. This vulnerability can be exploited remotely via a specially designed web request...

CVE-2017-8654: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting XSS vulnerability when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability"...

Security Update for Microsoft SharePoint Server 2010 (August 2017)

The Microsoft SharePoint Server installed on the remote Windows host is missing security update 2956077. It is, therefore, affected by a cross-site scripting XSS vulnerability when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint...

PT-2017-18456

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 Service Pack 2 Description A cross-site scripting XSS issue exists due to improper sanitization of specially crafted web requests to affected SharePoint servers. An authenticated attacker could exploit this by...

Microsoft SharePoint Server 2010 Excel Services Remote Code Execution Vulnerability (KB3191902)

This host is missing an important security update according to Microsoft KB3191902 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Privilege escalation

Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...

PT-2017-18417

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue arises from the way Microsoft SharePoint Server sanitizes specially crafted web requests, leading to an elevation of privilege. This could allow an attacker to...