Microsoft SharePoint Server vulnerabilities

Microsoft SharePoint Server has an elevation of privilege vulnerability due to improper sanitization of a specially crafted web request to an affected SharePoint server.

A vulnerability in Microsoft SharePoint Server allows remote code execution by an attacker. Exploiting this flaw could lead to system takeover.

Vulnerability in Microsoft SharePoint Server allows remote code execution. An attacker could exploit it to run arbitrary code on the SharePoint server.

Information disclosure vulnerability in Microsoft SharePoint Server. An attacker could exploit this flaw to gain access to information that should be protected.

Remote Code Execution vulnerability in Microsoft SharePoint Server. Details are not provided in the description.

A remote code execution vulnerability in Microsoft SharePoint Server due to failure to properly identify and filter unsafe ASP.Net web controls. An authenticated attacker could exploit it by creating a specially crafted page. The update corrects how SharePoint Server handles processing of created content.

A vulnerability in Microsoft SharePoint Server allows for information disclosure, potentially leading to unauthorized access to sensitive data.

A vulnerability in Microsoft SharePoint Server allows for spoofing, which may lead to unauthorized access to user data. An attacker can exploit this flaw to impersonate a trusted source.

A vulnerability in Microsoft SharePoint Server allows for spoofing, potentially leading to unauthorized access to user data. An attacker could exploit this flaw to impersonate a trusted source.

A vulnerability in Microsoft SharePoint Server allows for information disclosure, potentially leading to unauthorized access to sensitive data.

A vulnerability in Microsoft SharePoint Server allows for security feature bypass, potentially leading to unauthorized access to data.

A vulnerability in Microsoft SharePoint Server allows for spoofing, potentially leading to unauthorized access to user data. An attacker can exploit this flaw to impersonate a trusted source.

A vulnerability in Microsoft SharePoint Server allows for remote code execution. An attacker can exploit this flaw to gain access to the system and execute unauthorized commands.

A vulnerability in Microsoft SharePoint Server allows for elevation of privileges, potentially leading to unauthorized access to system resources.

A vulnerability in Microsoft SharePoint Server allows for spoofing, potentially leading to unauthorized access to user data.

A vulnerability in Microsoft SharePoint Server allows for spoofing, potentially leading to unauthorized access to user data.

A vulnerability in Microsoft SharePoint Server allows attackers to remotely trigger an error, leading to a denial of service (DoS). Exploiting this flaw may result in service unavailability for users.

Elevation of privilege vulnerability in Microsoft SharePoint Server. Allows an attacker to gain higher privileges in the SharePoint environment.

A spoofing vulnerability in Microsoft SharePoint Server allows an attacker to impersonate a trusted resource or user. Exploitation could lead to tricking users and disclosing sensitive information.

Remote code execution vulnerability in Microsoft SharePoint Server. Allows an attacker to execute code on the server.

Spoofing vulnerability in Microsoft SharePoint Server. An attacker could impersonate a trusted source, potentially leading to fraud or unauthorized actions.

Spoofing vulnerability in Microsoft SharePoint Server. An attacker could impersonate a trusted source, potentially leading to fraud or unauthorized actions.

Spoofing vulnerability in Microsoft SharePoint Server. Allows an attacker to impersonate another user or service.

Remote code execution vulnerability in Microsoft SharePoint Server. An attacker could remotely execute code on the server.

A spoofing vulnerability in Microsoft SharePoint Server allows an attacker to impersonate a trusted resource or user. Exploitation could lead to tricking users and disclosing sensitive information.

Remote Code Execution vulnerability in Microsoft SharePoint Server. An attacker could exploit this vulnerability to execute arbitrary code on the server.

An information disclosure vulnerability in Microsoft SharePoint Server.

Spoofing vulnerability in Microsoft SharePoint Server. Allows an attacker to impersonate a trusted source.

Spoofing vulnerability in Microsoft SharePoint Server due to improper sanitization of crafted web requests. An authenticated attacker could perform XSS attacks and run scripts in the security context of the current user.

A cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server due to improper sanitization of specially crafted web requests. An authenticated attacker could send a malicious request and run script in the context of the current user.

Spoofing vulnerability in Microsoft SharePoint Server due to improper sanitization of specially crafted web requests. An authenticated attacker can send a crafted request and execute script in the security context of the current user.

Spoofing vulnerability in Microsoft SharePoint Server due to improper sanitization of specially crafted web requests. An authenticated attacker can send a crafted request and execute script in the security context of the current user.

An information disclosure vulnerability in Microsoft SharePoint Server where certain search function modes are vulnerable to cross-site search attacks (a CSRF variant). When users are logged in and visit a malicious page, the attacker can invoke search queries as the user, determining whether queries return results, thus discovering facts about searchable documents.

A cross-site-scripting (XSS) vulnerability in Microsoft SharePoint Server due to improper sanitization of specially crafted web requests. An authenticated attacker can send a crafted request, and upon exploitation, perform XSS attacks, read unauthorized content, act on behalf of the user (e.g., change permissions, delete content), and inject malicious content into the user's browser.

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server due to improper sanitization of specially crafted web requests. An authenticated attacker can send a crafted request and execute script in the security context of the current user.

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server due to improper sanitization of specially crafted web requests. An authenticated attacker can send a crafted request and execute script in the security context of the current user.