3454 matches found
Microsoft Office SharePoint Server Cross-Site Scripting Vulnerability
Microsoft Office SharePoint Server is a business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site...
CVE-2018-8431
CVE-2018-8431 describes an elevation of privilege in Microsoft SharePoint Server and SharePoint when a specially crafted web request is not properly sanitized. Affected products: Microsoft SharePoint Server and Microsoft SharePoint. Root cause: insufficient sanitization/input validation of crafte...
Description of the security update for SharePoint Server 2010: September 11, 2018
Description of the security update for SharePoint Server 2010: September 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...
Microsoft SharePoint Server CVE-2018-8428 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...
Security Updates for Microsoft SharePoint Server (September 2018)
The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an...
CVE-2018-8378
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft SharePoint Server,...
Description of the security update for SharePoint Enterprise Server 2016: August 14, 2018
None None...
Description of the security update for SharePoint Server 2010: August 14, 2018
Description of the security update for SharePoint Server 2010: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow information disclosure if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...
Description of the security update for SharePoint Server 2010 Office Web Apps: August 14, 2018
Description of the security update for SharePoint Server 2010 Office Web Apps: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow information disclosure if a user opens a specially crafted Office file. To learn more about these...
Description of the security update for SharePoint Server 2013: August 14, 2018
Description of the security update for SharePoint Server 2013: August 14, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow information disclosure if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...
Description of the security update for SharePoint Enterprise Server 2013: August 14, 2018
None None...
CVE-2018-8323
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...
CVE-2018-8299
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...
Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2018-13385)
Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Enterprise Server 2016 are both enterprise business collaboration platforms from Microsoft Corporation USA. The platforms are used to consolidate business information and enable sharing of work, collaborating with others, organizing...
Microsoft SharePoint Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Description of the security update for SharePoint Server 2013: July 10, 2018
Description of the security update for SharePoint Server 2013: July 10, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
End of support for Office 2016 and Office 2019
None None...
Description of the security update for SharePoint Server 2016: July 10, 2018
None None...
Microsoft SharePoint Server CVE-2018-8299 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...
Microsoft SharePoint Server CVE-2018-8300 Remote Code Execution Vulnerability
Description Microsoft SharePoint Server is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft SharePoint Enterprise Server 2016...