CVE-2020-1514 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1514

CVE-2020-1514 relates to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server. The issue arises when SharePoint does not properly sanitize a crafted web request, allowing an authenticated attacker to execute script in the user’s browser context, potentially reading restricted...

CVE-2020-1482 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1482

CVE-2020-1482 is a Microsoft SharePoint Server XSS vulnerability. An authenticated attacker can send a crafted web request to an affected SharePoint server, causing the server to execute script in the context of the current user. Impact statements from the sources indicate the attacker could read...

CVE-2020-1460 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2020-1453 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1460

CVE-2020-1460 is a Microsoft SharePoint Server Remote Code Execution vulnerability. The issue occurs when SharePoint Server fails to properly identify and filter unsafe ASP.Net web controls; an authenticated attacker can craft and invoke a malicious page to execute actions in the SharePoint appli...

CVE-2020-1453

CVE-2020-1453 is a remote code execution vulnerability in Microsoft SharePoint. It occurs when SharePoint fails to validate the source markup of an application package uploaded to affected SharePoint versions, allowing an attacker to execute arbitrary code in the SharePoint application pool and s...

CVE-2020-1440

CVE-2020-1440 describes a tampering vulnerability in Microsoft SharePoint Server where an authenticated attacker can modify a targeted user’s profile data by sending a specially crafted request. The root cause is SharePoint’s improper handling of profile data. The impact, as stated, is the abilit...

CVE-2020-1452 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1452

CVE-2020-1452 — SharePoint RCE : A remote code execution vulnerability where SharePoint fails to validate the source markup of application packages. Exploitation requires a user-uploaded, specially crafted SharePoint app package, allowing arbitrary code execution in the SharePoint application poo...

CVE-2020-1452 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1440 Microsoft SharePoint Server Tampering Vulnerability

...

CVE-2020-1345

CVE-2020-1345 corresponds to a Microsoft SharePoint Server XSS vulnerability. The issue arises when SharePoint Server fails to sanitize certain crafted web requests, enabling an authenticated attacker to execute scripts in the user’s browser and potentially read restricted content, perform action...

CVE-2020-1345 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1227

CVE-2020-1227 is a Microsoft SharePoint Server XSS vulnerability caused by improper sanitization of crafted web requests. An authenticated attacker can send a specially crafted request to an affected SharePoint server, enabling cross-site scripting and script execution in the user’s browser with ...

CVE-2020-1227 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1205 Microsoft SharePoint Spoofing Vulnerability

...

CVE-2020-1210 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1210

CVE-2020-1210 affects Microsoft SharePoint. A remote code execution flaw arises when SharePoint fails to validate the source markup of an application package; an attacker must have a user upload a crafted SharePoint app package to an affected SharePoint version. The impact is arbitrary code execu...