PT-2013-3048

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2010 SP1 Groove Server 2010 SP1 SharePoint Foundation 2010 SP1 Office Web Apps 2010 SP1 Description The issue is related to an elevation of privilege vulnerability that allows remote attackers to inject arbitrary we...

Microsoft SharePoint CVE-2013-1290 Information Disclosure Vulnerability

Description Microsoft SharePoint is prone to a remote information-disclosure vulnerability. Attackers may be able to exploit this issue to gain access to potentially sensitive information that may aid in further attacks. Technologies Affected Microsoft SharePoint Server 2013 Recommendations Run a...

PT-2013-3049

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2013 Description An issue exists where access controls for a SharePoint list are not properly established, allowing remote authenticated users to bypass intended restrictions on reading list items. This is related t...

MS13-030: Vulnerability in SharePoint could allow information disclosure: April 9, 2013

This update resolves a security vulnerability in Microsoft SharePoint Server 2013 that could allow information disclosure.IntroductionMicrosoft has released security bulletin MS13-030. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

MS13-030: Description of the security update for SharePoint Server 2013 (coreserver): April 9, 2013

This update resolves a security vulnerability that exists in Microsoft SharePoint Server 2013 that could allow information disclosure.Introduction This update resolves a security vulnerability that exists in Microsoft SharePoint Server 2013 that could allow information disclosure.SummaryMicrosoft...

CVE-2013-1290: Undefined Security Weakness

Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access controls for a SharePoint list, which allows remote authenticated users to bypass intended restrictions on reading list items via a direct request for a list's locatio...

Microsoft SharePoint CVE-2013-1289 HTML Injection Vulnerability

Description Microsoft SharePoint is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication...

Description of the Office Web Apps Server update: April 9, 2013 (KB2810007)

None None...

VulnCheck KEV: CVE-2013-1289

Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."...

CVE-2013-1289: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."...

PT-2013-3637

Name of the Vulnerable Software and Affected Versions CA SiteMinder Federation FSS versions 12.0 through 12.5 CA SiteMinder Federation Standalone versions 12.0 through 12.1 CA Agent for SharePoint 2010 CA SiteMinder for Secure Proxy Server versions 6.0 through 12.5 Description The issue concerns...

CVE-2013-2279: Improper Input Validation

CA SiteMinder Federation FSS 12.5, 12.0, and r6; Federation Standalone 12.1 and 12.0; Agent for SharePoint 2010; and SiteMinder for Secure Proxy Server 6.0, 12.0, and 12.5 does not properly verify XML signatures for SAML statements, which allows remote attackers to spoof other users and gain...

CVE-2013-0080

Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."...

CVE-2013-0083

Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."...

CVE-2013-0084

Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."...

CVE-2013-0085

Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service W3WP process crash and site outage via a crafted URL, aka "Buffer Overflow Vulnerability."...

Buffer overflow

Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service W3WP process crash and site outage via a crafted URL, aka "Buffer Overflow Vulnerability."...

CVE-2013-0083

Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."...

Design/Logic Flaw

Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."...