CVE-2019-0950

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0951...

CVE-2019-0951

CVE-2019-0951 is a spoofing vulnerability in Microsoft SharePoint Server where a specially crafted web request is not properly sanitized. It is distinct from CVE-2019-0949/0950. The CVSS v3 base score is 5.4 (Medium); attack vector NETWORK and user interaction is required. Connected sources do no...

CVE-2019-0952

CVE-2019-0952 is a remote code execution vulnerability in Microsoft SharePoint Server caused by failure to properly identify and filter unsafe ASP.NET web controls. Exploitation path involves sending a crafted page that executes in the SharePoint application pool’s security context, with authenti...

CVE-2019-0949

CVE-2019-0949 is a spoofing vulnerability in Microsoft SharePoint Server arising from improper sanitization of specially crafted web requests. Connected sources confirm this vulnerability family and link it to SharePoint Server, including a Nessus entry for SharePoint Server 2019 (builds

CVE-2019-0956

CVE-2019-0956 is described across connected sources as an information disclosure in Microsoft SharePoint Server caused by improper sanitization of specially crafted web requests. The published remediation is a security update (MS19-4464564 family) that addresses SharePoint Server web-request sani...

CVE-2019-0951

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0950...

CVE-2019-0952

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'...

CVE-2019-0950

The connected Nessus findings identify CVE-2019-0950 as a Spoofing vulnerability in Microsoft SharePoint Server , arising from the product’s failure to properly sanitize a specially crafted web request. Affected software includes SharePoint Server 2019 (builds older than 16.0.10345.12101) and Sha...

CVE-2019-0949

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0950, CVE-2019-0951...

CVE-2019-0956

An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Server Information Disclosure Vulnerability'...

CVE-2019-0952: Undefined Security Weakness

A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'...

CVE-2019-0963: Improper Neutralization of Input During Web Page Generation

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...

CVE-2019-0949: Improper Neutralization of Input During Web Page Generation

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0950, CVE-2019-0951...

CVE-2019-0957: Improper Input Validation

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0958...

CVE-2019-0950: Improper Neutralization of Input During Web Page Generation

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0951...

CVE-2019-0956: Improper Encoding or Escaping of Output

An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Server Information Disclosure Vulnerability'...

CVE-2019-0958: Improper Neutralization of Input During Web Page Generation

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0957...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-25043)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

CVE-2019-0951: Improper Neutralization of Input During Web Page Generation

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0950...

Security Updates for Microsoft SharePoint Server (May 2019)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an...