9297 matches found
CVE-2020-1500
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...
CVE-2020-1505
An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would...
CVE-2020-1500
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...
CVE-2020-1499
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...
Cross site scripting
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Cross site scripting
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Cross site scripting
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...
Information disclosure
An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an attacker would...
Cross site scripting
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...
Cross site scripting
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...
CVE-2020-1580
CVE-2020-1580 is an XSS vulnerability in Microsoft SharePoint Server where improper sanitization of crafted web requests could allow an authenticated attacker to execute scripts in the user’s browser, potentially reading restricted content, impersonating the user, and altering permissions. The vu...
CVE-2020-1580 Microsoft Office SharePoint XSS Vulnerability
...
CVE-2020-1573 Microsoft Office SharePoint XSS Vulnerability
...
CVE-2020-1573
CVE-2020-1573 is a Microsoft SharePoint Server cross-site scripting (XSS) vulnerability. The root cause is improper sanitization of crafted web requests, which an authenticated attacker could exploit to execute scripts in the user’s browser context, potentially reading restricted data, acting on ...
CVE-2020-1505
CVE-2020-1505 is an Information Disclosure vulnerability affecting Microsoft SharePoint Server where in-memory objects are mishandled. An attacker must log on to an affected system and run a specially crafted application to obtain information that could help compromise the user’s system. The issu...
CVE-2020-1505 Microsoft SharePoint Information Disclosure Vulnerability
...
CVE-2020-1501
CVE-2020-1501 is a Microsoft SharePoint Server spoofing vulnerability where a specially crafted web request is not properly sanitized, enabling an authenticated attacker to perform cross‑site scripting and execute actions in the user’s security context. The impact described in the sources include...
CVE-2020-1501 Microsoft SharePoint Spoofing Vulnerability
...
CVE-2020-1500
CVE-2020-1500 is a SharePoint vulnerability in which an authenticated user could send a specially crafted request to a SharePoint Server, causing spoofing and cross-site scripting (XSS) in the user’s browser. The root cause is improper sanitization of web requests on SharePoint Server, enabling a...
