9296 matches found
Cross site scripting
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...
Cross site scripting
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Remote code execution
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker who successfully exploited the vulnerability could use a specially crafted page to perform actions in the security conte...
Remote code execution
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...
Cross site scripting
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Cross site scripting
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Remote code execution
A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm...
Cross site scripting
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Cross site scripting
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Remote code execution
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...
CVE-2020-1595 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2020-1595 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2020-1595
CVE-2020-1595 is a Microsoft SharePoint remote code execution vulnerability. The issue arises from unsafe deserialization of untrusted data by SharePoint APIs, allowing an attacker to run arbitrary code in the SharePoint application pool and farm account if they can access a susceptible API with ...
CVE-2020-1576
CVE-2020-1576 is a remote code execution vulnerability in Microsoft SharePoint. According to the provided sources, the flaw occurs when SharePoint fails to validate the source markup of an application package uploaded to an affected SharePoint version, allowing an attacker to execute arbitrary co...
CVE-2020-1576 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2020-1575 Microsoft Office SharePoint XSS Vulnerability
...
CVE-2020-1575
The CVE-2020-1575 entry describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of crafted web requests. An authenticated attacker can exploit this by sending a specially crafted request to an affected SharePoint server, enabling XSS in ...
CVE-2020-1523 Microsoft SharePoint Server Tampering Vulnerability
...
CVE-2020-1523
CVE-2020-1523 is a tampering vulnerability in Microsoft SharePoint Server related to how profile data is processed. An authenticated attacker can modify a targeted user’s profile data by sending a specially crafted request to the affected SharePoint Server. The issue is addressed by a security up...