PT-2020-1794 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: This issue is caused by the failur...

The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

PT-2020-1803 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A cross-site scripting XSS issue...

CVE-2020-0694

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0693...

CVE-2020-0694

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0693...

CVE-2020-0693

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0694...

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0693...

CVE-2020-0693

Technical details for CVE-2020-0693 are not publicly available in the provided documents; no affected products, versions, or fixes are disclosed. Monitor for updates.

Description of the security update for SharePoint Server 2019: February 11, 2020

None None...

PT-2020-1737 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A cross-site scripting issue exists due to improper sanitization of specially crafted web requests...

Security Updates for Microsoft SharePoint Server (February 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by a cross-site scripting vulnerability. A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web...

PT-2020-1684 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This occurs when Microsoft SharePoint Server fails to properly sanitize a specially crafted web request...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to a faulty limitation on the path name to the restricted access catalog. This allows attackers to exploit the protected resources.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a malicious actor to disclose...

Microsoft SharePoint Server Information Disclosure Vulnerability (CNVD-2019-46110)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

Microsoft Issues Out-of-Band Update for SharePoint Bug

UPDATE Microsoft has added a fresh CVE to its security portal, linking it to the existing November security updates the patch itself was already included in the updates, but not specifically named. The CVE describes a vulnerability in SharePoint Server. According to a Microsoft Security Advisory,...

Microsoft Releases Information on CVE-2019-1491

Microsoft has released information about CVE-2019-1491, a vulnerability in SharePoint Server. An attacker could exploit this vulnerability to obtain sensitive information. Microsoft released security updates for this vulnerability as part of its December 2019 Security Updates. The Cybersecurity a...

Description of the security update for SharePoint Server 2019: November 12, 2019

None None...

Microsoft SharePoint Server CVE-2019-1491 Information Disclosure Vulnerability

Description Microsoft SharePoint Server is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2010 SP2...

KLA11632 An information disclosure vulnerability in Microsoft Office

An information disclosure vulnerability was found in Microsoft SharePoint Server. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2019-1491 Related products Microsoft-Sharepoint-Server CVE list CVE-2019-1491 unknown KB list 4484142 4484143...

The vulnerability of Microsoft Excel, Office, Office 365, Microsoft SharePoint Enterprise Server, and Office Online Server packages lies in the fact that operations are performed outside of the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Microsoft Excel, Office, Office 365, Microsoft SharePoint Enterprise Server, and Office Online Server packages relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...