Microsoft SharePoint Server 2019 < 16.0.10367.20000 Multiple Vulnerabilities

Microsoft SharePoint Server 2019 <16.0.10367.20000 Multiple Vulnerabilities related to remote code execution, information disclosure, and cross-site scripting (XSS) exist in Microsoft Excel and SharePoint applications

Reporter	Title	Published	Views	Family All 168
0day.today	Microsoft SharePoint SSI / ViewState Remote Code Execution Exploit	19 Oct 202000:00	–	zdt
ATTACKERKB	CVE-2020-16952 — Microsoft SharePoint Remote Code Execution Vulnerabilities	16 Oct 202000:00	–	attackerkb
Information Security Automation	Vulristics Vulnerability Score, Automated Data Collection and Microsoft Patch Tuesdays Q4 2020	11 Jan 202101:50	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of security measures for website structures, allowing attackers to execute cross-site scripting attacks.	22 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of security measures for website structures, allowing attackers to execute cross-site scripting attacks.	22 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of security measures for website structures, allowing attackers to execute cross-site scripting attacks.	22 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.	22 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient input validation, allowing attackers to execute arbitrary code.	22 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient input validation, allowing attackers to execute arbitrary code.	22 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel’s spreadsheet editor, related to errors in memory object handling, allows a hacker to execute arbitrary code.	29 Oct 202000:00	–	bdu_fstec

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16950
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16952
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16941
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16945
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16929
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16946

19 Jan 2024 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 26.8

CVSS 3.17.8 - 8.7

EPSS0.75075