3561 matches found
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing attackers to execute spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks using a specially crafted request sent to the vulnerable SharePoint server...
Microsoft SharePoint Information Disclosure Vulnerability (CNVD-2020-32100)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...
Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-32107)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...
Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-32098)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...
Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-32104)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...
Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-32105)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...
Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-32102)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...
Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-32101)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...
Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2020-32097)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...
The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of restrictions on file downloads, which allows attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by downloading a specially created SharePoint application...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server arises from the lack of measures taken to protect the structure of web pages. This allows attackers to execute cross-site scripting attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending a specially crafted request t...
Description of the security update for SharePoint Server 2010: May 12, 2020
Description of the security update for SharePoint Server 2010: May 12, 2020 Summary This security update resolves a cross-site-scripting XSS vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To...
Description of the security update for SharePoint Enterprise Server 2013: May 12, 2020
None None...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Description of the security update for SharePoint Server 2019: May 12, 2020
None None...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
PT-2020-2699 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site scripting issue exists due to improper sanitization of specially crafted web requests. An authenticated attacker could exploit this by sending a crafted...
PT-2020-2476 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A cross-site scripting XSS issue...
Security Updates for Microsoft SharePoint Server (May 2020)
The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an...
PT-2020-2477 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to a cross-si...