CVE-2023-29357: Incorrect Implementation of Authentication Algorithm

Microsoft SharePoint Server Elevation of Privilege Vulnerability...

CVE-2023-33130: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2023-33129: Heap-based Buffer Overflow

Microsoft SharePoint Server Denial of Service Vulnerability...

PT-2023-3184 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Description: The issue is related to insufficient access control in Microsoft SharePoint Server,...

PT-2023-3161 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SharePoint Server and SharePoint Enterprise Server. This can be exploited by a remote attacker using...

Security Updates for Microsoft SharePoint Server 2016 (June 2023)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a denial of service vulnerability %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid177240;...

Microsoft SharePoint Server Code Execution

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

Microsoft SharePoint Server Disclosure of Information

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

Microsoft SharePoint Server Subscription Edition Spear Phishing Information Disclosure

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to perform a spear-phishing attack and expose the...

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2023-53467)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

Security Updates for Microsoft SharePoint Server 2019 (May 2023)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A Sharepoint Server spoofing vulnerability. CVE-2023-24950 - A Sharepoint Server information disclosure vulnerability. CVE-2023-24950 - A...

Security Updates for Microsoft SharePoint Server Subscription Edition (May 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A Sharepoint Server spoofing vulnerability. CVE-2023-24950 - A Sharepoint Server information disclosure vulnerability...

Security Updates for Microsoft SharePoint Server 2016 (May 2023)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A Sharepoint Server spoofing vulnerability. CVE-2023-24950 - A Sharepoint Server information disclosure vulnerability. CVE-2023-24950 - A...

CVE-2023-24950

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2023-24954

Microsoft SharePoint Server Information Disclosure Vulnerability...

CVE-2023-24955

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2023-24954

Microsoft SharePoint Server Information Disclosure Vulnerability...

CVE-2023-24950

Microsoft SharePoint Server Spoofing Vulnerability...

Information disclosure

Microsoft SharePoint Server Information Disclosure Vulnerability...

Microsoft Patch Tuesday for May 2023 — Fewest vulnerabilities disclosed in a month in three-plus years

Microsoft disclosed 40 vulnerabilities across its suite of products and software Tuesday, the fewest the companys included in a Patch Tuesday since December 2019. However, two of the vulnerabilities is being actively exploited in the wild, according to Microsoft, the fourth month in a row in whic...