Количество 4
Количество 4
CVE-2020-1523
<p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data.</p> <p>To exploit the vulnerability, an attacker would need to be authenticated on an affected SharePoint Server. The attacker would then need to send a specially modified request to the server, targeting a specific user.</p> <p>The security update addresses the vulnerability by modifying how Microsoft SharePoint Server handles profile data.</p>
CVE-2020-1523
Microsoft SharePoint Server Tampering Vulnerability
GHSA-6vqx-2465-vx69
A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data, aka 'Microsoft SharePoint Server Tampering Vulnerability'. This CVE ID is unique from CVE-2020-1440.
BDU:2020-04434
Уязвимость пакетов программ Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft SharePoint Enterprise Server, связанная с недостаточной проверкой входных данных, позволяющая получить доступ на изменение данных
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2020-1523 <p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data.</p> <p>To exploit the vulnerability, an attacker would need to be authenticated on an affected SharePoint Server. The attacker would then need to send a specially modified request to the server, targeting a specific user.</p> <p>The security update addresses the vulnerability by modifying how Microsoft SharePoint Server handles profile data.</p> | CVSS3: 8.9 | 1% Низкий | больше 5 лет назад | |
CVE-2020-1523 Microsoft SharePoint Server Tampering Vulnerability | CVSS3: 8.9 | 1% Низкий | больше 5 лет назад | |
GHSA-6vqx-2465-vx69 A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data, aka 'Microsoft SharePoint Server Tampering Vulnerability'. This CVE ID is unique from CVE-2020-1440. | CVSS3: 8.9 | 1% Низкий | больше 3 лет назад | |
BDU:2020-04434 Уязвимость пакетов программ Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft SharePoint Enterprise Server, связанная с недостаточной проверкой входных данных, позволяющая получить доступ на изменение данных | CVSS3: 4.3 | 1% Низкий | больше 5 лет назад |
Уязвимостей на страницу