CVE-2017-8654: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting XSS vulnerability when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability"...

PT-2017-18456

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 Service Pack 2 Description A cross-site scripting XSS issue exists due to improper sanitization of specially crafted web requests to affected SharePoint servers. An authenticated attacker could exploit this by...

KLA11089 XSS vulnerability in Microsoft Sharepoint Server

An XSS cross-site scripting vulnerability related to an improper sanitizing of web requests was found in Microsoft SharePoint Server. By exploiting this vulnerability malicious users can spoof user interaface. This vulnerability can be exploited remotely via a specially designed web request...

Microsoft Office SharePoint CVE-2017-8654 Cross Site Scripting Vulnerability

Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

Security Update for Microsoft SharePoint Server 2010 (August 2017)

The Microsoft SharePoint Server installed on the remote Windows host is missing security update 2956077. It is, therefore, affected by a cross-site scripting XSS vulnerability when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint...

Vulnerability of Microsoft Office Online Server, Microsoft Excel Viewer, Microsoft Office Compatibility Pack, Microsoft SharePoint Server, Microsoft Office, and Microsoft Excel, allowing a perpetrator to execute arbitrary code

The vulnerabilities of Microsoft Office Online Server, Microsoft Excel Viewer, Microsoft Office Compatibility Pack, Microsoft SharePoint Server, Microsoft Office, and Microsoft Excel are related to object handling in memory. Exploitation of these vulnerabilities can allow a malicious actor to...

Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2017-22663)

Microsoft SharePoint Enterprise Server is a portal site that enables organizations to develop intelligent portal sites that seamlessly connect to users. A security vulnerability in Microsoft SharePoint Enterprise Server's filtering of incoming malicious web requests allows an attacker to exploit...

Microsoft SharePoint Server 2010 Excel Services Remote Code Execution Vulnerability (KB3191902)

This host is missing an important security update according to Microsoft KB3191902 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SharePoint Enterprise Server 2013 Remote Code Execution Vulnerability (KB3213559)

This host is missing an important security update according to Microsoft KB3213559. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SharePoint Enterprise Server 2016 Elevation of Privilege Vulnerability (KB3213544)

This host is missing an important security update according to Microsoft KB3213544 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-8569

Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...

CVE-2017-8569

Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...

Privilege escalation

Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...

CVE-2017-8569

Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...

CVE-2017-8569

CVE-2017-8569 affects Microsoft SharePoint Server. The issue stems from improper sanitization of crafted web requests, enabling elevation of privilege and cross-site scripting in the authenticated user context. Affected product scope includes SharePoint Server (notably 2016/Enterprise variants); ...

Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3213559)

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Enterprise Server 2013 (KB3213559) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Enterprise Server 2016 (KB3213544) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for SharePoint Server 2010 Office Web Apps: July 11, 2017

Description of the security update for SharePoint Server 2010 Office Web Apps: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities,...

Description of the security update for SharePoint Server 2010: July 11, 2017

Description of the security update for SharePoint Server 2010: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...