PT-2019-1134 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site scripting issue exists due to inadequate protection of the web page structure. This can be exploited by sending a specially crafted request to the vulnerabl...

Microsoft Office SharePoint CVE-2019-0556 Cross Site Scripting Vulnerability

Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

Microsoft Word CVE-2019-0585 Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

Microsoft Office SharePoint CVE-2019-0557 Cross Site Scripting Vulnerability

Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

Microsoft Office SharePoint CVE-2019-0558 Cross Site Scripting Vulnerability

Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

PT-2019-1140

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue arises from the improper sanitization of specially crafted web requests to an affected SharePoint server. This could allow a remote attacker to perform...

PT-2019-1164

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Microsoft Office affected versions not specified Microsoft Office Word Viewer affected versions not specified Office 365 ProPlus affected versions not specified Microsoft SharePoint affected...

CVE-2019-0558: Improper Neutralization of Input During Web Page Generation

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint,...

CVE-2019-0557: Improper Neutralization of Input During Web Page Generation

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from...

CVE-2019-0556: Improper Neutralization of Input During Web Page Generation

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from...

CVE-2019-0585: Undefined Security Weakness

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint,...

CVE-2019-0562: Undefined Security Weakness

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...

Microsoft SharePoint Server CVE-2019-0562 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

KLA11396 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

SQL Injection Vulnerabilities Exist in Many Places in Yuanheng Times Workflow Engine System

Beijing Yuanheng Times Technology Co., Ltd. is the first full-service IT service provider in China to launch a collaboration management system based on Microsoft SharePoint platform. SQL injection vulnerability exists in many places in the workflow engine system of Yuanheng Times, which can be...

The vulnerability of the Microsoft SharePoint Enterprise Server software, related to access control errors, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through a specially crafted request...

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges, allowing a perpetrator to execute arbitrary code on the server.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the server through a specially created page...

The vulnerability of the Microsoft SharePoint software lies in the lack of measures taken to protect the website structure, allowing attackers to execute cross-site scripting attacks with elevated privileges.

The vulnerability of the Microsoft SharePoint package exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks with elevated privileges, using a specially crafted request to the...

The vulnerability of the Microsoft SharePoint Enterprise Server software, related to deficiencies in access control, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially crafted request...

The vulnerability of the Microsoft SharePoint Enterprise Server software, related to access control errors, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through a specially crafted request...