CVE-2017-8569: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...

KLA11069 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges and spoof user interface. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities related to improper handling of...

Microsoft Office CVE-2017-8501 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Security Update for Microsoft Office Online Server and SharePoint Server 2010 Office Web Apps (July 2017)

The Microsoft Office Online Server or SharePoint Server 2010 Office Web Apps installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. An unauthenticated, remote...

Microsoft Office 365 Enterprise E3 Insufficient Session Expiration Vulnerability

Microsoft Office 365 Enterprise E3 suffers from an insufficient session expiration vulnerability. Product: Office 365 Sharepoint Manufacturer: Microsoft Affected Versions: ? Tested Versions: Office 365 Enterprise E3 version from February 2017 Vulnerability Type: Insufficient Session Expiration...

Microsoft Office 365 Enterprise E3 Insufficient Session Expiration

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2017-011 Product: Office 365 Sharepoint Manufacturer: Microsoft Affected Versions: ? Tested Versions: Office 365 Enterprise E3 version from February 2017 Vulnerability Type: Insufficient Session Expiration CWE-613 Risk Level: Low...

The vulnerability of the Microsoft Office software suite, the Office Online Server web-based software, PowerPoint for Mac presentation preparation software, Office Web Apps Server, Microsoft SharePoint Server, and the Microsoft Office Web Apps software suite allows a perpetrator to execute arbitrary code.

The vulnerabilities of the Microsoft Office suite, the Office Online Server web-based software, PowerPoint for Mac presentation preparation software, Office Web Apps Server, Microsoft SharePoint Server, and the Microsoft Office Web Apps suite are related to improper access to objects in memory...

The vulnerabilities of the Microsoft Office suite of programs, the Microsoft OneNote note-taking software, the Microsoft Word text editor, the Office Web Apps Server network software, the Microsoft SharePoint Server network software, the Microsoft Office Web Apps suite of programs, and the Microsoft Office Compatibility Pack allow a perpetrator to execute arbitrary code.

Vulnerabilities of the Microsoft Office suite of programs, the Microsoft OneNote note-taking software, the Microsoft Word text editor, the Office Web Apps Server web application, the Microsoft SharePoint Server web application, and the Microsoft Office Web Apps suite are related to improper acces...

The vulnerability of the Microsoft Office software suite, the Office Online Server web-based software, PowerPoint for Mac presentation preparation software, Office Web Apps Server, Microsoft SharePoint Server, and the Microsoft Office Web Apps software suite allows a perpetrator to execute arbitrary code.

The vulnerabilities of the Microsoft Office suite, the Office Online Server web-based software, PowerPoint for Mac presentation preparation software, Office Web Apps Server, Microsoft SharePoint Server, and the Microsoft Office Web Apps suite are related to improper access to objects in memory...

Microsoft Malware Protection Engine < 1.1.13903 RCE

The version of Microsoft Malware Protection Engine MMPE installed on the remote Windows host is prior to 1.1.13903.0. It is, therefore, affected by a remote code execution vulnerability due to improper handling of files during scanning. An unauthenticated, remote attacker can exploit this, via a...

Microsoft Project Server 2013 XSS Vulnerability (KB3203399)

This host is missing an important security update according to Microsoft KB3203399 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-8551

An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint XSS vulnerability"...

CVE-2017-8551

An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint XSS vulnerability"...

CVE-2017-8514

An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint Reflective XSS Vulnerability"...

CVE-2017-8514

An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint Reflective XSS Vulnerability"...

Information disclosure

An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint Reflective XSS Vulnerability"...

Privilege escalation

An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint XSS vulnerability"...

CVE-2017-8514

An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint Reflective XSS Vulnerability"...

CVE-2017-8551

An elevation of privilege vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint XSS vulnerability"...

CVE-2017-8514

CVE-2017-8514 corresponds to Microsoft SharePoint Reflective XSS. The linked documents confirm an information disclosure/reflective XSS vulnerability in SharePoint Server where improper sanitization of a crafted web request enables an authenticated attacker to trigger script execution in a victim...