8952 matches found
PT-2022-5877 · Microsoft · Sharepoint Server +2
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundatio...
Microsoft SharePoint 安全漏洞
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft Corporation USA. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information.A remo...
CVE-2022-44690 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2022-44693 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2022-44693
CVE-2022-44693 is a Microsoft SharePoint Server remote code execution vulnerability. Connected sources confirm impact on SharePoint Server components and indicate remediation via security updates: KB5002321 (SharePoint Server 2016) addresses the vulnerability with a 16.0.5374.1000 build in the up...
Security Updates for Microsoft SharePoint Server Subscription Edition (December 2022)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands...
Security Updates for Microsoft SharePoint Foundation 2013 (December 2022)
The Microsoft SharePoint Foundation 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 703...
Security Updates for Microsoft SharePoint Server 2016 (December 2022)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 70300 C...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in their susceptibility to corruption of unreliable data in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the ability to restore unreliable data in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Security Updates for Microsoft SharePoint Server Subscription Edition Language Pack (November 2022)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing a language pack security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute...
CVE-2022-45910
Improper neutralization of special elements used in an LDAP query 'LDAP Injection' vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries DoS, additional queries, filter manipulation during...
CVE-2022-45910
Improper neutralization of special elements used in an LDAP query 'LDAP Injection' vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries DoS, additional queries, filter manipulation during...
Design/Logic Flaw
Improper neutralization of special elements used in an LDAP query 'LDAP Injection' vulnerability in ActiveDirectory and Sharepoint ActiveDirectory authority connectors of Apache ManifoldCF allows an attacker to manipulate the LDAP search queries DoS, additional queries, filter manipulation during...
CVE-2022-45910
The CVE-2022-45910 entry corresponds to an LDAP Injection vulnerability in Apache ManifoldCF’s ActiveDirectory and Sharepoint ActiveDirectory connectors. The root cause is improper neutralization of special LDAP elements when username or domain strings are passed to the UserACLs servlet during us...
Apache ManifoldCF 注入漏洞
Apache ManifoldCF is an open source framework of the United States Apache Apache Foundation . It is used to connect a source content repository to a target repository or index. An injection vulnerability exists in Apache ManifoldCF version 2.23 and earlier, which stems from improper neutralizatio...
U.S. Dept Of Defense: Reflective Cross Site Scripting (XSS) on ███████/Pages
Summary: A reflection cross-site scripting XSS vulnerability was discovered in Microsoft SharePoint Server. The vulnerability was caused by improper sanitization of a web request to an affected SharePoint server. The vulnerability could have been exploited by an authenticated attacker to execute...
The vulnerability of the Microsoft SharePoint software package arises from insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of the Microsoft SharePoint software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...