The host is installed with Microsoft SharePoint Server 2010, 2013, Foundation 2013, Office Web Apps 2010 or Web Apps Server 2013 and is prone to a XSS spoofing vulnerability. A flaw is present in the applications, which fail to properly sanitize a specially crafted request. Successful exploitation could allow attackers to update is required to fix multiple remote code execution vulnerabilities. The flaws are present in the applications, which fails to properly handle crafted Microsoft Office file. Successful exploitation could allow attackers to perform cross-site scripting attacks on affected systems.