CVE-2020-1456

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1451...

CVE-2020-1456

CVE-2020-1456 is a SharePoint Server cross-site scripting (XSS) vulnerability. The initial doc describes exploitation via an improperly sanitized crafted web request, enabling script execution in the user’s context (XSS). Connected documents (CNVD entries) corroborate a SharePoint Server XSS weak...

CVE-2020-1456

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1451...

CVE-2020-1454

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint...

CVE-2020-1451

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1456...

CVE-2020-1454

CVE-2020-1454 corresponds to a SharePoint Reflective XSS vulnerability. Affected product: SharePoint Server. Root cause: improper sanitization of a specially crafted request, enabling an authenticated attacker to trigger cross-site scripting on the affected server. In the connected scanning resul...

CVE-2020-1454

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint...

CVE-2020-1451

CVE-2020-1451 is a Microsoft SharePoint Server XSS vulnerability caused by improper sanitization of crafted web requests. Public data in the provided documents shows a CVSS v3.1 base score of 5.4 (Network, Low privileges, UI: Required, Scope: Changed; Confidentiality/Integrity: Low) and notes the...

CVE-2020-1451

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1450, CVE-2020-1456...

CVE-2020-1450

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1451, CVE-2020-1456...

CVE-2020-1450

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1451, CVE-2020-1456...

CVE-2020-1450

CVE-2020-1450 is an XSS vulnerability affecting Microsoft SharePoint Server. The issue arises from improper sanitization of crafted web requests to the SharePoint server, enabling script execution in the user's context. Documented references (CNVD entries and Nessus plugin notes) corroborate Cros...

CVE-2020-1443

CVE-2020-1443 describes a spoofing vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. Multiple connected sources (NVD, CNVD, and related Nessus entries) reiterate that SharePoint Server does not properly sanitize crafted requests, enab...

CVE-2020-1444

CVE-2020-1444 is described across multiple connected sources as a remote code execution vulnerability in Microsoft SharePoint, triggered by parsing specially crafted email messages. The Red Hat and CNVD entries reiterate the same root cause, and Nessus-based scans list CVE-2020-1444 among several...

CVE-2020-1443

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'...

CVE-2020-1444

A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'...

CVE-2020-1439

A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Remote Code Execution Vulnerability'...

CVE-2020-1439

CVE-2020-1439 is a remote code execution vulnerability in Microsoft SharePoint’s PerformancePoint Services. The root cause, as stated in multiple sources, is that the service fails to validate the source markup of input XML, allowing an attacker to craft input that leads to code execution within ...

CVE-2020-1147

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'...

CVE-2020-1147

CVE-2020-1147 affects the .NET Framework, SharePoint Server, and Visual Studio. The root cause is improper handling of XML input, specifically a failure to validate the source markup during deserialization, which can lead to remote code execution. The vulnerability is characterized by the ability...