9756 matches found
The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server stems from the lack of measures taken to protect the website structure. This allows attackers to execute cross-site scripting attacks.
The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management lies in memory object processing errors, which allow attackers to exploit these vulnerabilities to disclose protected information.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created...
Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-34777)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...
Microsoft SharePoint Information Leakage Vulnerability
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...
Vulnerability of Microsoft SharePoint, Microsoft Office, Office 365, and Microsoft Word software packages, allowing a hacker to execute arbitrary code.
The vulnerability of Microsoft SharePoint, Microsoft Office, Office 365, and the Microsoft Word text editor relates to the execution of operations outside the buffer in memory. Exploitation of this vulnerability can allow a malicious actor to execute arbitrary code on the target system with...
Security Updates for Microsoft SharePoint Server (August 2019)
The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who...
CVE-2019-1203
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
CVE-2019-1202
An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects. An authenticated attacker who successfully exploited the vulnerability could hijack the session of another user. To exploit this vulnerability, the attacker could run a specially crafted...
CVE-2019-1202
An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects. An authenticated attacker who successfully exploited the vulnerability could hijack the session of another user. To exploit this vulnerability, the attacker could run a specially crafted...
CVE-2019-1203
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Information disclosure
An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects, aka 'Microsoft SharePoint Information Disclosure Vulnerability'...
Cross site scripting
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...
CVE-2019-1203 Microsoft Office SharePoint XSS Vulnerability
...
CVE-2019-1202
CVE-2019-1202 affects Microsoft SharePoint where session objects are mishandled, enabling an authenticated attacker to hijack another user’s session. The root cause is improper handling of session objects within SharePoint. A specially crafted application could be used to exploit the flaw. Remedi...
CVE-2019-1203
The CVE-2019-1203 entry refers to a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server caused by insufficient sanitization of crafted web requests. An authenticated attacker could exploit this to run scripts in the user’s browser, access restricted content, perform actions on...
CVE-2019-1202 SharePoint Information Disclosure Vulnerability
...
CVE-2019-1202: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects. An authenticated attacker who successfully exploited the vulnerability could hijack the session of another user. To exploit this vulnerability, the attacker could run a specially crafted...
CVE-2019-1203: Improper Neutralization of Input During Web Page Generation
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4475557)
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4475557) farm-deployment
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...