Microsoft SharePoint Server Code Execution

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

Microsoft SharePoint Server Code Execution

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

Security Updates for Microsoft SharePoint Server 2010 (February 2021)

The Microsoft SharePoint Server 2010 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24071 - A sessi...

Security Updates for Microsoft SharePoint Server 2019 (February 2021)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24071 - A sessi...

Security Updates for Microsoft SharePoint Server 2016 (February 2021)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24071 - A sessi...

Security Updates for Microsoft SharePoint Server 2013 (February 2021)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24071 - A sessi...

Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Description of the security update for SharePoint Server 2019: February 9, 2021 (KB4493194)

None None...

PT-2021-2086 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SharePoint Server, allowing a remote attacker to execute arbitrary code. This can be exploited by a...

PT-2021-2155 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to a spoofing vulnerability in Microsoft SharePoint. It is caused by insufficient input validation, which can be exploited by a remote attacker to...

Microsoft SharePoint Privilege Escalation

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

PT-2021-3088 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The vulnerability in Microsoft SharePoint Server is related to insufficient input sanitization, allowing a remote attacker to execute arbitrary code. In a network-based...

Microsoft Office Code Execution

The vulnerability of Microsoft Excel, the Microsoft Office suite, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to...

Microsoft SharePoint Server Spoofing

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to perform spear-phishing attacks remotely...

Microsoft SharePoint Server Privilege Escalation

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code...

Microsoft SharePoint Server Code Execution

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

VulnCheck KEV: CVE-2018-8580

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks a variant of cross-site request forgery, CSRF, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microso...

Security Updates for Microsoft SharePoint Server 2019 (January 2021)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-1641,...

Security Updates for Microsoft SharePoint Server 2010 (January 2021)

The Microsoft SharePoint Server 2010 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An unspecified tampering vulnerability. CVE-2021-1718 - A remote code execution vulnerability. An attacker can exploit this to bypass...

Security Updates for Microsoft SharePoint Server 2013 (January 2021)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-1641,...