Description of the security update for SharePoint Server 2019: July 13, 2021 (KB5001975)

🗓️ 13 Jul 2021 07:00:00Reported by MicrosoftType

Security update for SharePoint Server 2019: July 13, 2021 resolves remote code execution and spoofing vulnerabilities, includes improvements and fixes, adds ability to change ASP.NET view state decryption and validation keys, and may cause known issues with SharePoint 2010 workflows

Reporter	Title	Published	Views	Family All 65
ATTACKERKB	CVE-2021-34467	16 Jul 202121:15	–	attackerkb
ATTACKERKB	CVE-2021-34520	14 Jul 202118:15	–	attackerkb
ATTACKERKB	CVE-2021-34517	14 Jul 202118:15	–	attackerkb
ATTACKERKB	CVE-2021-34468	14 Jul 202118:15	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server lies in improper code generation management, allowing an attacker to execute arbitrary code.	12 Jan 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the Microsoft.SharePoint.WorkflowActions.SetVariableActivity class in Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server allows a perpetrator to execute arbitrary code.	12 Jan 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in information representation errors in the user interface, which allows attackers to perform spoofing attacks.	4 Feb 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in improper code generation management, allowing an attacker to execute arbitrary code.	7 Feb 202200:00	–	bdu_fstec
Circl	CVE-2021-34467	15 Jul 202110:13	–	circl
Circl	CVE-2021-34468	15 Jul 202110:13	–	circl

13 Jul 2021 07:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26.5

CVSS 3.18.1 - 8.8

EPSS0.05383