8940 matches found
Description of the security update for SharePoint Foundation 2013: July 9, 2019
Description of the security update for SharePoint Foundation 2013: July 9, 2019 Summary This security update resolves an Authentication Bypass vulnerability that allows SAML tokens to be signed by using arbitrary symmetric keys in Windows Communication Foundation WCF and Windows Identity Foundati...
Description of the security update for SharePoint Enterprise Server 2016: July 9, 2019
None None...
Description of the security update for SharePoint Server 2019: July 9, 2019
None None...
Description of the security update for SharePoint Foundation 2010: July 9, 2019
Description of the security update for SharePoint Foundation 2010: July 9, 2019 Summary This security update resolves an Authentication Bypass vulnerability that allows SAML tokens to be signed by using arbitrary symmetric keys in Windows Communication Foundation WCF and Windows Identity Foundati...
Description of the security update for SharePoint Enterprise Server 2013: July 9, 2019
None None...
WCF/WIF SAML Token Authentication Bypass Vulnerability
An authentication bypass vulnerability exists in Windows Communication Foundation WCF and Windows Identity Foundation WIF, allowing signing of SAML tokens with arbitrary symmetric keys. This vulnerability allows an attacker to impersonate another user, which can lead to elevation of privileges. T...
PT-2019-2725 · Microsoft · Sharepoint Server
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site-scripting XSS issue exists due to improper sanitization of specially crafted web requests. This could allow a remote attacker to perform cross-site scriptin...
Microsoft Windows WCF/WIF SAML Token CVE-2019-1006 Authentication Bypass Vulnerability
Description Microsoft Windows is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism and gain unauthorized access. This may lead to further attacks. Technologies Affected Microsoft .NET Framework 2.0 SP2 Microsoft .NET Framewo...
Security Updates for Microsoft SharePoint Server (July 2019)
The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An authentication bypass vulnerability exists in Windows Communication Foundation WCF and Windows Identity Foundation WIF, allowing signing of SA...
Microsoft Office SharePoint CVE-2019-1134 Cross Site Scripting Vulnerability
Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
KLA11512 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Excel can be...
Exploit for Improper Input Validation in Microsoft
CVE-2019-0604 cve-2019-0604 SharePoint RCE...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2019-10245...
The vulnerability of the Microsoft SharePoint software package, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft SharePoint software package is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Microsoft SharePoint software package, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft SharePoint software package is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Microsoft SharePoint software package, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft SharePoint software package is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Microsoft SharePoint software package, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft SharePoint software package is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The software vulnerabilities of Microsoft SharePoint Foundation allow attackers to execute cross-site scripting attacks and compromise the integrity of protected information, due to insufficient validation of input data.
The vulnerability of Microsoft SharePoint Foundation software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks remotely and affect the integrity of protected information by sending a specially craft...
The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software suite lies in the lack of protection for administrative data, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software lies in the lack of protection for business data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created request sent to t...
The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software suite relates to security configuration errors, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software lies in security configuration errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created page in the vulnerable version of Microsof...