Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...

CVE-2020-0978

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...

CVE-2020-0976

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-0972, CVE-2020-0975, CVE-2020-0977...

CVE-2020-0976

CVE-2020-0976 is a SharePoint Server spoofing vulnerability. The entry notes improper sanitization of a crafted web request to affected SharePoint servers, enabling spoofing. Nessus/patch data in connected documents indicate this CVE is included in Microsoft’s April 2020 updates, with remediation...

CVE-2020-0975

CVE-2020-0975 is a SharePoint Spoofing vulnerability in Microsoft SharePoint Server. The issue arises when SharePoint does not properly sanitize a specially crafted web request to the affected server, enabling spoofing under the SharePoint server context. Connected sources confirm this CVE as par...

CVE-2020-0954

Technical details for CVE-2020-0954 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2020-0933

Technical details about CVE-2020-0933 are not publicly available in the provided documents (no affected products, exploit info, or remediation details are described). Monitor for updates.

CVE-2020-0930

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...

CVE-2020-0930

Technical details (affected products, versions, vulnerability root cause, impact, and remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2020-0926

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...

CVE-2020-0926

Technical details for CVE-2020-0926 are not publicly available in the provided documents. Monitor for updates from official sources to confirm affected products, vectors, and mitigations.

CVE-2020-0924

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0925, CVE-2020-0926...

Microsoft SharePoint Server Information Disclosure Vulnerability

An information disclosure vulnerability exists in SharePoint Server. An attacker who exploited this vulnerability could read arbitrary files on the server. To exploit the vulnerability, an attacker would need to send a specially crafted request to a susceptible SharePoint Server instance. The...

Description of the security update for SharePoint Server 2010 Office Web Apps: April 14, 2020

Description of the security update for SharePoint Server 2010 Office Web Apps: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerability...

Description of the security update for SharePoint Server 2010: April 14, 2020

Description of the security update for SharePoint Server 2010: April 14, 2020 Summary This security update resolves a cross-site-scripting XSS vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint server. To...

Description of the security update for SharePoint Server 2010: April 14, 2020

Description of the security update for SharePoint Server 2010: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Comm...

Description of the security update for SharePoint Enterprise Server 2016: April 14, 2020

None None...

Description of the security update for SharePoint Enterprise Server 2016: April 14, 2020

None None...

Description of the security update for SharePoint Server 2010: April 14, 2020

Description of the security update for SharePoint Server 2010: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft SharePoint if the software does not check the source markup of an application package. To learn more about the...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...