Lucene search
+L

3454 matches found

BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.11 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

6.1CVSS5.9AI score0.03077EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.8 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.9AI score0.01582EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.9 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.9AI score0.01414EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.7 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through specially crafted web pages...

9CVSS7.7AI score0.09924EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/26 12:0 a.m.10 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server arises from the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

9.3CVSS5.9AI score0.01626EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/26 12:0 a.m.7 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

9.3CVSS7.3AI score0.10413EPSS
SaveExploits0References2
OSV
OSV
added 2020/05/21 11:15 p.m.2 views

CVE-2020-1106

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1100, CVE-2020-1101...

6.1CVSS5.8AI score0.03077EPSS
SaveExploits1References2
OSV
OSV
added 2020/05/21 11:15 p.m.2 views

CVE-2020-1101

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1100, CVE-2020-1106...

5.4CVSS6.3AI score0.01626EPSS
SaveExploits0References1
NVD
NVD
added 2020/05/21 11:15 p.m.20 views

CVE-2020-1101

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1100, CVE-2020-1106...

5.4CVSS5.3AI score0.01626EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/21 11:15 p.m.2 views

CVE-2020-1100

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1101, CVE-2020-1106...

5.4CVSS6.3AI score0.01626EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/21 11:15 p.m.2 views

CVE-2020-1099

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1100, CVE-2020-1101, CVE-2020-1106...

5.4CVSS6.3AI score0.01626EPSS
SaveExploits0References1
NVD
NVD
added 2020/05/21 11:15 p.m.22 views

CVE-2020-1100

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1101, CVE-2020-1106...

5.4CVSS5.3AI score0.01626EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/21 11:15 p.m.4 views

CVE-2020-1105

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1104, CVE-2020-1107...

5.4CVSS6.3AI score0.01582EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/21 11:15 p.m.2 views

CVE-2020-1107

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1104, CVE-2020-1105...

5.4CVSS6.3AI score0.01414EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/21 11:15 p.m.2 views

CVE-2020-1103

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks a variant of cross-site request forgery, CSRF.When users are simultaneously logged in to Microsoft SharePoint Server and visit a...

6.5CVSS6.7AI score0.0274EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/21 11:15 p.m.5 views

CVE-2020-1069

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'...

8.8CVSS7.7AI score0.09924EPSS
SaveExploits0References2
Prion
Prion
added 2020/05/21 11:15 p.m.22 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1101, CVE-2020-1106...

3.5CVSS5.1AI score0.03077EPSS
SaveExploits1References1Affected Software3
Prion
Prion
added 2020/05/21 11:15 p.m.27 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1100, CVE-2020-1106...

3.5CVSS5.1AI score0.03077EPSS
SaveExploits1References1Affected Software3
Prion
Prion
added 2020/05/21 11:15 p.m.25 views

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1100, CVE-2020-1101...

4.3CVSS5.1AI score0.03077EPSS
SaveExploits1References2Affected Software3
CVE
CVE
added 2020/05/21 10:53 p.m.99 views

CVE-2020-1106

CVE-2020-1106 corresponds to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server, where improper sanitization of a crafted web request can lead to an XSS condition on the affected server. The NVD entry notes a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, User...

6.1CVSS5.1AI score0.03077EPSS
SaveExploits1References2Affected Software3
Rows per page
Query Builder