CVE-2020-1499

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...

Cross site scripting

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...

Information disclosure

An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would...

Cross site scripting

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...

Cross site scripting

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

CVE-2020-1573

CVE-2020-1573 is a Microsoft SharePoint Server cross-site scripting (XSS) vulnerability. The root cause is improper sanitization of crafted web requests, which an authenticated attacker could exploit to execute scripts in the user’s browser context, potentially reading restricted data, acting on ...

CVE-2020-1500

CVE-2020-1500 is a SharePoint vulnerability in which an authenticated user could send a specially crafted request to a SharePoint Server, causing spoofing and cross-site scripting (XSS) in the user’s browser. The root cause is improper sanitization of web requests on SharePoint Server, enabling a...

Microsoft SharePoint Server 2019 - Remote Code Execution

Exploit Title: Microsoft SharePoint Server 2019 - Remote Code Execution Google Dork: inurl:quicklinks.aspx Date: 2020-08-14 Exploit Author: West Shepherd Vendor Homepage: https://www.microsoft.com Version: SharePoint Enterprise Server 2013 Service Pack 1, SharePoint Enterprise Server 2016 ,...

SRC-2020-0024 : Microsoft SharePoint Server TOCTOU ControlParameter Binding Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the WebPartEditingSurfacePage class. The issue results from the lac...

SRC-2020-0028 : Microsoft SharePoint Server PasswordRecovery Information Disclosure Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to disclose sensitive information on affected installations of SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the PasswordRecovery class. The issue results from the lack...

SRC-2020-0034 : Microsoft SharePoint Server SPSqlDataSource Information Disclosure Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to disclose sensitive information on affected installations of SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the SPSqlDataSource class. The issue results from the lack ...

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially create...

Description of the security update for SharePoint Enterprise Server 2016: August 11, 2020

None None...

Description of the security update for SharePoint Server 2019 Language Pack: August 11, 2020

None None...

Description of the security update for SharePoint Server 2019: August 11, 2020

None None...

Description of the security update for SharePoint Server 2010: August 11, 2020

Description of the security update for SharePoint Server 2010: August 11, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software if the software does not correctly handle objects in memory. To learn more about the vulnerability, se...

Description of the security update for SharePoint Server 2010: August 11, 2020

Description of the security update for SharePoint Server 2010: August 11, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...

Description of the security update for SharePoint Server 2010 Office Web Apps: August 11, 2020

Description of the security update for SharePoint Server 2010 Office Web Apps: August 11, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilitie...

Description of the security update for SharePoint Server 2010: August 11, 2020

Description of the security update for SharePoint Server 2010: August 11, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...