Security Updates for Microsoft Sharepoint Server (September 2017)

The Microsoft Sharepoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who...

PT-2017-18447

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2013 Service Pack 1 Description The issue arises when Microsoft SharePoint Server fails to properly sanitize a specially crafted web request to an affected SharePoint server. This allows an attacker to perform...

PT-2017-18506

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft SharePoint Server affected versions not specified Description The issue arises from improper sanitization of specially crafted web requests to an affected SharePoint server. An...

PT-2017-2926

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint 2016 Microsoft SharePoint Enterprise Server 2016 Office Online Server affected versions not specified Description A remote code execution issue exists when the software fails to properly handle objects in memory. This coul...

Microsoft SharePoint Server CVE-2017-8629 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attackers may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microso...

Microsoft SharePoint CVE-2017-8745 Cross Site Scripting Vulnerability

Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

Microsoft SharePoint Server Information Disclosure Vulnerability (2827663)

This host is missing an important security update according to Microsoft Bulletin MS13-030 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Microsoft SharePoint Server 2010 Service Pack 2 Spoofing Vulnerability (KB2956077)

This host is missing an important security update according to Microsoft KB2956077 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2017-23792)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site...

CVE-2017-8654

Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting XSS vulnerability when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability"...

CVE-2017-8654

Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting XSS vulnerability when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability"...

Cross site scripting

Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting XSS vulnerability when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability"...

CVE-2017-8654

Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting XSS vulnerability when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability"...

CVE-2017-8654

CVE-2017-8654 affects Microsoft SharePoint Server 2010 SP2; an XSS vulnerability arises when the server fails to properly sanitize specially crafted web requests. Exploitation could allow an attacker to run script in the user's browser (read/alter content, potentially impersonate user actions). R...

Microsoft Patch Tuesday - August 2017

Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 48 new vulnerabilities with 25 of them rated critical, 21 rated important, and 2 rated moderate. These...

Description of the security update for SharePoint Server 2010: August 8, 2017

Description of the security update for SharePoint Server 2010: August 8, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Microsoft Office SharePoint CVE-2017-8654 Cross Site Scripting Vulnerability

Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

CVE-2017-8654: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting XSS vulnerability when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability"...

Security Update for Microsoft SharePoint Server 2010 (August 2017)

The Microsoft SharePoint Server installed on the remote Windows host is missing security update 2956077. It is, therefore, affected by a cross-site scripting XSS vulnerability when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint...