Microsoft App Installer Security Updates (December 2021)

The app installer installation on the remote host is missing a security update. It is, therefore, affected by a session spoofing vulnerability. An attacker can exploit this if the user opens a specially crafted attachment. This will allow the attacker to perform actions with the privileges of the...

Security Updates for Microsoft SharePoint Server 2019 (December 2021)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-42320,...

Security Updates for Microsoft SharePoint Server 2013 (December 2021)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-43242 ...

Security Updates for Microsoft SharePoint Server Subscription Edition (December 2021)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user...

Security Updates for Microsoft SharePoint Server 2016 (December 2021)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-42320,...

Security Updates for Microsoft SharePoint Server 2013 (February 2022)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21987 ...

Security Updates for Microsoft SharePoint Server 2019 (February 2022)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21987 ...

Security Updates for Microsoft SharePoint Server Subscription Edition (February 2022)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user...

KB5009595: Windows 8.1 and Windows Server 2012 R2 Security Updates (January 2022)

The remote Windows host is missing security update 5009595 or cumulative update 5009624. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services...

KB5009619: Windows Server 2012 Security Update (January 2022)

The remote Windows host is missing security update 5009619. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21850, CVE-2022-21851,...

KB5009555: Windows Server 2022 Security Updates (January 2022)

The Windows Server 2022 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21836 - A remote co...

KB5009543: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (January 2022)

The remote Windows host is missing security update 5009543. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21849, CVE-2022-21850,...

KB5009566: Windows 11 Security Updates (January 2022)

The Windows 11 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21836 - A remote code...

KB5009601: Windows Server 2008 Security Update (January 2022)

The remote Windows host is missing security update 5009601 or cumulative update 5009627. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21880, CVE-2022-21904,...

KB5009546: Windows 10 Version 1607 and Windows Server 2016 Security Update (January 2022)

The remote Windows host is missing security update 5009546. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21849, CVE-2022-21850,...

KB5009621: Windows 7 and Windows Server 2008 R2 Security Update (January 2022)

The remote Windows host is missing security update 5009621. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21850, CVE-2022-21851,...

KB5009545: Windows 10 Version 1909 Security Update (January 2022)

The remote Windows host is missing security update 5009545. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21849, CVE-2022-21850,...

Security Updates for Microsoft Office Products (December 2021)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-43256, CVE-2021-43875 - An...

Security Updates for Exchange (November 2021) (Remote)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-41349,...

CVE-2021-42545

An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...