MS12-050: Description of the security update for SharePoint Server 2010: July 10, 2012

Describes the security update for SharePoint Server 2010, that was released on July 10, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-050. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

CVE-2012-1859: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka...

PT-2012-3604

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 versions Gold through SP1 Microsoft SharePoint Foundation 2010 versions Gold through SP1 Microsoft Office Web Apps 2010 versions Gold through SP1 Description A cross-site scripting issue exists, allowing remote...

CVE-2012-1860: Undefined Security Weakness

Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service data modificati...

PT-2012-3602

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 versions Gold through SP1 Microsoft SharePoint Foundation 2010 versions Gold through SP1 Microsoft Office Web Apps 2010 versions Gold through SP1 Description The issue allows remote attackers to inject arbitrar...

PT-2012-3603

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2007 versions SP2 through SP3 SharePoint Server 2010 versions Gold through SP1 Office Web Apps 2010 versions Gold through SP1 Description The issue allows remote authenticated users to obtain sensitive...

MS12-050: Description of the security update for Groove Server 2010: July 10, 2012

None None...

Microsoft SharePoint Privilege Elevation Vulnerabilities (2663841)

This host is missing an important security update according to Microsoft Bulletin MS12-011. OpenVAS Vulnerability Test $Id: secpodms12-011.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft SharePoint Privilege Elevation Vulnerabilities 2663841 Authors: Madhuri D Copyright: Copyright c 2012 SecPod,...

Description of the update for Lync Server 2010: March 2012

Describes the update for Lync Server 2010 that is dated March 2012.SummaryThis article describes the update for Microsoft Lync Server 2010 that is dated March 2012. This article describes the following items about the update package:The issues that the update package fixes.The prerequisites for...

A DTMF-based IVR application that is developed by using Lync Server 2010, UCMA 3.0 Workflow APIs crashes

Fixes an issue in which a DTMF-based IVR application crashes when a user barges-in multiple times with invalid DTMF digits or barges-in to request help. This issue occurs if the application is developed by using Lync Server 2010, UCMA 3.0 Workflow APIs.SymptomsConsider the following scenario: You...

Description of the update package for Lync Server 2010, Web Components Server: March 2012

Describes the update for Lync Server 2010, Web Components Server that is dated March 2012.SummaryThis article describes the update for Microsoft Lync Server 2010, Web Components Server that is dated March 2012. INTRODUCTIONThis update improves the reliability, stability and performance of Lync...

CVE-2012-0144

Cross-site scripting XSS vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."...

CVE-2012-0144

CVE-2012-0144 is an XSS vulnerability in themeweb.aspx affecting Microsoft SharePoint products: SharePoint Server 2010 Gold/SP1 and SharePoint Foundation 2010 Gold/SP1. The issue allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL. OpenVAS/Nessus entri...

PT-2012-2346

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2010 versions Gold and SP1 Microsoft SharePoint Foundation 2010 versions Gold and SP1 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via...

CVE-2012-0145: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in wizardlist.aspx Vulnerability...

PT-2012-2347

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2010 versions Gold and SP1 Microsoft SharePoint Foundation 2010 versions Gold and SP1 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via...

CVE-2012-0144: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."...

Description of the update for Lync Server 2010, Web Components Server: December 2011

Describes the update for Lync Server 2010, Web Components Server that is dated December 2011.SummaryThis article describes the update for Microsoft Lync Server 2010, Web Components Server that is dated December 2011. ResolutionMicrosoft Download CenterThe following file is available for download...

Description of the update for Lync Server 2010 Bandwidth Policy Service: December 2011

Describes the update for Lync Server 2010 Bandwidth Policy Service that is dated December 2011.SummaryThis article describes the update for Microsoft Lync Server 2010 Bandwidth Policy Service that is dated December 2011.INTRODUCTIONIssues that this update fixesThis update fixes the following...

Description of the update for Lync Server 2010: December 2011

Describes the update for Lync Server 2010 that is dated December 2011.SummaryThis article describes the update for Microsoft Lync Server 2010 that is dated December 2011. ResolutionMicrosoft Download CenterThe following file is available for download from the Microsoft Download Center:Download th...