Количество 4
Количество 4
CVE-2020-1440
<p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data.</p> <p>To exploit the vulnerability, an attacker would need to be authenticated on an affected SharePoint Server. The attacker would then need to send a specially modified request to the server, targeting a specific user.</p> <p>The security update addresses the vulnerability by modifying how Microsoft SharePoint Server handles profile data.</p>
CVE-2020-1440
Microsoft SharePoint Server Tampering Vulnerability
GHSA-5r4c-r95m-h54g
A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data, aka 'Microsoft SharePoint Server Tampering Vulnerability'. This CVE ID is unique from CVE-2020-1523.
BDU:2020-04436
Уязвимость пакетов программ Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft SharePoint Enterprise Server, связанная с недостаточной проверкой входных данных, позволяющая получить доступ на изменение данных
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2020-1440 <p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data.</p> <p>To exploit the vulnerability, an attacker would need to be authenticated on an affected SharePoint Server. The attacker would then need to send a specially modified request to the server, targeting a specific user.</p> <p>The security update addresses the vulnerability by modifying how Microsoft SharePoint Server handles profile data.</p> | CVSS3: 6.3 | 2% Низкий | больше 5 лет назад | |
CVE-2020-1440 Microsoft SharePoint Server Tampering Vulnerability | CVSS3: 6.3 | 2% Низкий | больше 5 лет назад | |
GHSA-5r4c-r95m-h54g A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data, aka 'Microsoft SharePoint Server Tampering Vulnerability'. This CVE ID is unique from CVE-2020-1523. | CVSS3: 6.3 | 2% Низкий | больше 3 лет назад | |
BDU:2020-04436 Уязвимость пакетов программ Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft SharePoint Enterprise Server, связанная с недостаточной проверкой входных данных, позволяющая получить доступ на изменение данных | CVSS3: 4.3 | 2% Низкий | больше 5 лет назад |
Уязвимостей на страницу