CVE-2020-1101 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1102

CVE-2020-1102 is a remote code execution vulnerability in Microsoft SharePoint where the product fails to check the source markup of an application package. Connected Nessus entries indicate affected suites include: Microsoft SharePoint Server 2016 < 16.0.5005.1000 (multiple vulnerabilities in...

CVE-2020-1101

CVE-2020-1101 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server where the application does not properly sanitize a specially crafted web request. The issue affects SharePoint Server (per the CVE) and is corroborated by connected sources noting XSS in SharePoint S...

CVE-2020-1102 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1100 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1099 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1100 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1099

CVE-2020-1099 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. The provided documents identify the vulnerability type and affected product (Microsoft SharePoint Server) but do not specify affect...

CVE-2020-1099 Microsoft Office SharePoint XSS Vulnerability

...

CVE-2020-1100

CVE-2020-1100 is an XSS vulnerability in Microsoft SharePoint Server where improper sanitization of a specially crafted web request can lead to compromised data in affected SharePoint deployments. The vulnerability affects SharePoint Server components handling input to web requests; CVSS v3.1 vec...

CVE-2020-1069

CVE-2020-1069 is a Microsoft SharePoint Server remote code execution vulnerability described as failing to properly identify and filter unsafe ASP.NET web controls. Public documents indicate an RCE could occur when processing unsafe ASP.NET controls (and related SharePoint package handling) with ...

CVE-2020-1069 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2020-1024 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1024

CVE-2020-1024 concerns a remote code execution in Microsoft SharePoint caused by the product failing to check the source markup of an application package. The connected Nessus plugins for SharePoint Server indicate this alongside other vulnerabilities across multiple versions (e.g., SharePoint Se...

CVE-2020-1023 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-1023

CVE-2020-1023 is a remote code execution vulnerability in Microsoft SharePoint described in the connected Nessus entries as affecting SharePoint Server versions that rely on self-reported version numbers: SharePoint Server 2013 < 15.0.5241.1000, SharePoint Server 2016 < 16.0.5005.1000, and ...

MS14-022: Description of the security update for SharePoint Server 2013 (coreserverloc): May 13, 2014

Resolves vulnerabilities in Microsoft Office server and productivity software that could allow remote code execution if an authenticated attacker sends specially crafted page content to a target SharePoint server.IntroductionThis security update resolves vulnerabilities in Microsoft Office server...

MS14-022: Description of the security update for SharePoint Foundation 2013: May 13, 2014

Resolves vulnerabilities in Microsoft Office server and productivity software that could allow remote code execution if an authenticated attacker sends specially crafted page content to a target SharePoint server.IntroductionThis security update resolves vulnerabilities in Microsoft Office server...

The vulnerability of Microsoft SharePoint Foundation and SharePoint Enterprise Server packages, related to insufficient validation of input data, allows attackers to execute spear-phishing attacks.

The vulnerability of Microsoft SharePoint Foundation and SharePoint Enterprise Server lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks using a specially crafted request sent to the vulnerable SharePoint server...

CVE-2020-1069: NULL Pointer Dereference

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker who successfully exploited the vulnerability could use a specially crafted page to perform actions in the security conte...