9753 matches found
Cross site scripting
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...
CVE-2019-1330
CVE-2019-1330 details (normal mode): An elevation-of-privilege vulnerability exists in Microsoft SharePoint Server described as the “Microsoft SharePoint Elevation of Privilege Vulnerability.” The vulnerability involves improper handling/sanitization of specially crafted web requests to the affec...
CVE-2019-1330
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1329...
CVE-2019-1329
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1330...
CVE-2019-1328
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'...
CVE-2019-1329
CVE-2019-1329 is an elevation-of-privilege vulnerability in Microsoft SharePoint Server caused by improper sanitization of a specially crafted web request. The issue enables privilege escalation on affected SharePoint Server instances. The provided documents do not include a remediation or patch ...
CVE-2019-1328
CVE-2019-1328: A spoofing vulnerability in Microsoft SharePoint Server arises from improper sanitization of specially crafted web requests. Affected product: SharePoint Server (on-premises). Root cause: insufficient sanitization leading to spoofing. Impact per available data: confidentiality impa...
CVE-2019-1070
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...
CVE-2019-1070
CVE-2019-1070 is an XSS vulnerability affecting Microsoft SharePoint Server. The issue arises because SharePoint Server does not properly sanitize specially crafted web requests, enabling an attacker to execute scripts in the context of the current user after authentication. The published details...
CVE-2019-1328: Improper Neutralization of Input During Web Page Generation
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'...
CVE-2019-1070: Improper Neutralization of Input During Web Page Generation
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...
CVE-2019-1329: Improper Neutralization of Input During Web Page Generation
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1330...
CVE-2019-1330: Undefined Security Weakness
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1329...
Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-35572)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...
Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4462215)
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4462215) farm-deployment
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft SharePoint Foundation 2013 (KB4484122)
A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4475608)
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft SharePoint Foundation 2013 (KB4484122) farm-deployment
A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4484111) farm-deployment
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...