Description of the security update for SharePoint Enterprise Server 2016: October 8, 2019

🗓️ 08 Oct 2019 07:00:00Reported by MicrosoftType

Security update for SharePoint Enterprise Server 2016: October 8, 2019. Resolves spoofing vulnerability, delivers Feature Pack 2, fixes permission issues, and improves Project Server

Reporter	Title	Published	Views	Family All 52
BDU FSTEC	The vulnerability of Microsoft SharePoint Enterprise Server and Microsoft SharePoint Foundation arises from the lack of measures taken to protect the structure of web pages. This allows attackers to execute cross-site scripting attacks.	24 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Enterprise Server and Microsoft SharePoint Foundation lies in the lack of measures taken to protect the structure of web pages, allowing attackers to enhance their privileges.	24 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their lack of access control mechanisms, which allows attackers to increase their privileges.	24 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software lies in the lack of protection for website structures. This allows attackers to execute cross-site scripting attacks and execute arbitrary code in the context of the current user.	29 Oct 201900:00	–	bdu_fstec
CNVD	Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-35572)	10 Oct 201900:00	–	cnvd
CNVD	Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-40533)	18 Oct 201900:00	–	cnvd
Check Point Advisories	Microsoft SharePoint Server Cross Site Scripting (CVE-2019-1070)	12 Apr 202000:00	–	checkpoint_advisories
CVE	CVE-2019-1070	10 Oct 201913:28	–	cve
CVE	CVE-2019-1328	10 Oct 201913:28	–	cve
CVE	CVE-2019-1329	10 Oct 201913:28	–	cve

08 Oct 2019 07:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24

CVSS 3.16.5

EPSS0.02442