CVE-2023-33165 Microsoft SharePoint Server Security Feature Bypass Vulnerability

🗓️ 11 Jul 2023 17:02:20Reported by microsoftType

Security feature bypass vulnerability in Microsoft SharePoint Server

Reporter	Title	Published	Views	Family All 18
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages is related to security configuration errors, allowing attackers to circumvent existing security restrictions.	28 Jul 202300:00	–	bdu_fstec
CNNVD	Microsoft SharePoint 安全漏洞	11 Jul 202300:00	–	cnnvd
CNVD	Microsoft SharePoint Server Security Feature Bypass Vulnerability (CNVD-2023-72194)	13 Jul 202300:00	–	cnvd
CVE	CVE-2023-33165	11 Jul 202317:02	–	cve
EUVD	EUVD-2023-37350	3 Oct 202520:07	–	euvd
Microsoft KB	Description of the security update for SharePoint Server 2019: July 11, 2023 (KB5002423)	11 Jul 202307:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server Subscription Edition: July 11, 2023 (KB5002424)	11 Jul 202307:00	–	mskb
Kaspersky	KLA50773 Multiple vulnerabilities in Microsoft Office	11 Jul 202300:00	–	kaspersky
Microsoft CVE	Microsoft SharePoint Server Security Feature Bypass Vulnerability	11 Jul 202307:00	–	mscve
NCSC	Vulnerabilities fixed in Microsoft Office	11 Jul 202300:00	–	ncsc

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.10400.20008",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server Subscription Edition",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.16130.20642",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33165

01 Jan 2025 01:51Current

8.3High risk

Vulners AI Score8.3

CVSS 3.14.3

EPSS0.01011

CWE-200