4133 matches found
CVE-2023-36764 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
Description of the security update for SharePoint Server 2019: September 12, 2023 (KB5002472)
None None...
Microsoft SharePoint security vulnerabilities
Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation o...
Security Updates for Microsoft SharePoint Server Subscription Edition (September 2023)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. %NASLMINLEVEL 70300 C...
CVE-2023-36764: External Control of File Name or Path
Microsoft SharePoint Server Elevation of Privilege Vulnerability...
PT-2023-4989 · Microsoft · Sharepoint Server
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Microsoft SharePoint Server, which can be exploited by creating a specially crafted ASP.NET page. This...
Security Updates for Microsoft SharePoint Server 2016 (September 2023)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2023-36764 - A remote code execution...
Microsoft SharePoint Server Spoofing
The vulnerability of Microsoft SharePoint Server packages is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...
Microsoft SharePoint Server Unauthorized Access
The vulnerability of Microsoft SharePoint Server packages is related to insufficient protection of operational data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information remotely...
Security Bulletin: A vulnerability in MicrosoftAspNetCore.Identity affects IBM Robotic Process Automation and may result in allowing an attacker to bypass secrity restrictions (CVE-2023-33170).
Summary Microsoft.AspNetCore.Identity is used by IBM Robotic Process Automation as part of login functionality. CVE-2023-33170 Vulnerability Details CVEID:CVE-2023-33170 DESCRIPTION: Microsoft SharePoint Server could allow a remote attacker to bypass security restrictions. By winning a race...
Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2023-64873)
Microsoft SharePoint Server Information Disclosure Vulnerability CNVD-2023-64874...
Microsoft SharePoint Server Unauthorized Access
The vulnerability of Microsoft SharePoint Server packages is related to insufficient protection of operational data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information remotely...
Microsoft SharePoint Server Spoofing
The vulnerability of Microsoft SharePoint Server packages is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...
Security Updates for Microsoft SharePoint Server 2019 (August 2023)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2023-36890,...
Security Updates for Microsoft SharePoint Server 2016 (August 2023)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2023-36894...
CVE-2023-36894
Microsoft SharePoint Server Information Disclosure Vulnerability...
CVE-2023-36891
Microsoft SharePoint Server Spoofing Vulnerability...
CVE-2023-36892
Microsoft SharePoint Server Spoofing Vulnerability...
