Microsoft SharePoint Server 2019 build < 16.0.10350.20000 Multiple Vulnerabilities

🗓️ 29 Apr 2020 00:00:00Reported by This script is Copyright (C) 2020-2026 and is owned by Tenable, Inc. or an Affiliate thereof.Type

nessus

nessus🔗 www.tenable.com👁 15 Views

Microsoft SharePoint Server 2019 build < 16.0.10350.20000 Multiple Vulnerabilitie

Reporter	Title	Published	Views	Family All 99
0day.today	Microsoft SharePoint 2013 SP1 - (DestinationFolder) Persistant Cross-Site Scripting Vulnerability	25 Sep 201900:00	–	zdt
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in Microsoft SharePoint Foundation software, related to errors in processing authentication requests for applications, allows a hacker to perform cross-site forgery of these requests.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management relates to session management errors, allowing an attacker to escalate their privileges.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management lies in errors during the processing of authentication requests for applications. This allows a hacker to perform cross-site forgery of these requests.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Foundation software, related to the lack of measures for cleaning input data, allows a perpetrator to carry out cross-site scripting attacks.	13 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.	3 Oct 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.	3 Oct 201900:00	–	bdu_fstec
CNVD	Microsoft SharePoint Privilege Vulnerability	12 Sep 201900:00	–	cnvd
CNVD	Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-31853)	12 Sep 201900:00	–	cnvd

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1296
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1259
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1261
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1260
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

14 Mar 2023 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 26.8

CVSS 3.18.8

EPSS0.4093

microsoft sharepoint 2019 vulnerabilities elevation of privilege spoofing cross-site scripting xss remote code execution csrf apis unsafe data input application package markup source markup.