Microsoft: >> Sharepoint Enterprise Server Security Vulnerabilities
An information disclosure vulnerability exists when Microsoft SharePoint software fails to properly sanitize a specially crafted requests, aka "Microsoft SharePoint Reflective XSS Vulnerability".
CVSS Score
5.4
EPSS Score
0.007
Published
2017-06-15
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score
7.8
EPSS Score
0.336
Published
2017-01-10
Page 25