KLA11069 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges and spoof user interface. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities related to improper handling of...

CVE-2017-8569: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...

Microsoft SharePoint Server Multiple RCE Vulnerabilities (KB3172445)

This host is missing an important security update according to Microsoft KB3172445 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Update for Microsoft SharePoint Server (June 2017)

The Microsoft SharePoint Server installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in Microsoft Office due to improper handling of objects in memory. An unauthenticated,...

PT-2017-2332

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Office Online Server affected versions not specified PowerPoint for Mac affected versions not specified Office Web Apps Server affected versions not specified Microsoft SharePoint Server affecte...

PT-2017-2335

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft OneNote affected versions not specified Microsoft Word affected versions not specified Office Web Apps Server affected versions not specified Microsoft SharePoint Server affected...

PT-2017-2333

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Office Online Server affected versions not specified PowerPoint for Mac affected versions not specified Office Web Apps Server affected versions not specified Microsoft SharePoint Server affecte...

CVE-2017-0254

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, Word 2013 RT SP1, Word 2013 SP1, Word Automation Services on Microsoft SharePoint Server 2013 SP1,...

CVE-2017-0254: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, Word 2013 RT SP1, Word 2013 SP1, Word Automation Services on Microsoft SharePoint Server 2013 SP1,...

Microsoft SharePoint Server WAS Remote Code Execution Vulnerability (3162040)

This host is missing an important security update for Microsoft SharePoint Server WAS according to Microsoft KB3162040 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3162069)

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

PT-2017-2150

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft Word affected versions not specified Word Viewer affected versions not specified Microsoft SharePoint Server affected versions...

CVE-2017-0195: Improper Neutralization of Input During Web Page Generation

Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server 2013 SP1 and Office Online Server allows remote attackers to perform cross-site scripting and run script with local use...

Microsoft SharePoint Server Excel Services Elevation of Privilege Vulnerability (3178724)

This host is missing an important security update according to Microsoft security updates KB3178724 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2017-0107: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server fails to sanitize crafted web requests, allowing remote attackers to run cross-script in local security context, aka "Microsoft SharePoint XSS Vulnerability."...

PT-2017-1656

Name of the Vulnerable Software and Affected Versions Microsoft Office Compatibility Pack affected versions not specified Microsoft Excel affected versions not specified Microsoft SharePoint Server affected versions not specified Microsoft Excel Viewer affected versions not specified Description...

Microsoft SharePoint Server WAS Multiple Vulnerabilities (4013241)

This host is missing an important security update according to Microsoft Bulletin MS17-014 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Microsoft SharePoint Server Excel Services Multiple Vulnerabilities (4013241)

This host is missing an important security update according to Microsoft Bulletin MS17-014. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

PT-2017-1528

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue arises from Microsoft SharePoint Server's failure to properly sanitize crafted web requests, allowing remote attackers to run cross-script in the local security...

PT-2017-1636

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft Office Compatibility Pack affected versions not specified Microsoft Word affected versions not specified Microsoft SharePoint...