Microsoft SharePoint Server 2013 < 15.0.5249.1001 Multiple Vulnerabilities

🗓️ 25 Jun 2020 00:00:00Reported by This script is Copyright (C) 2020-2026 and is owned by Tenable, Inc. or an Affiliate thereof.Type

nessus

nessus🔗 www.tenable.com👁 18 Views

Microsoft SharePoint Server 2013 < 15.0.5249.1001 Multiple Vulnerabilitie

Reporter	Title	Published	Views	Family All 156
Huntr	Improper Resolution of Path Equivalence	28 Feb 202214:48	–	huntr
ATTACKERKB	CVE-2020-1295 Microsoft SharePoint Elevation of Privilege Vulnerability	9 Jun 202000:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday June 2020: The Bleeding Ghost of SMB	23 Jun 202001:31	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to increase their privileges.	19 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software allows attackers to carry out cross-site scripting attacks.	26 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server, related to deficiencies in access control, allows attackers to increase their privileges.	26 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	26 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	26 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the redirection of URLs to an unreliable website, allowing attackers to redirect target users to a malicious website via a specially created link.	30 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	3 Jul 202000:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1323
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1320
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1177
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1183
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1295
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

14 Mar 2023 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 26.5

CVSS 3.15.4 - 8.8

EPSS0.5074

SSVC

elevation of privilege spoofing cross-site-scripting open redirect remote code execution unsafe asp security vulnerabilities