The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server packages lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server packages is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform a spear-phishing attack remotely...

CVE-2025-21393

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2025-21393

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2025-21348

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2025-21344

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2025-21348

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2025-21393

CVE-2025-21393 affects Microsoft SharePoint Server (on‑prem). The vulnerability is described as a spoofing flaw that could allow impersonation of another user, with CVSS‑3.1 base metrics: Network access, low attack complexity, privileges required Low, user interaction required, confidentiality im...

CVE-2025-21348

CVE-2025-21348 is a Microsoft SharePoint Server remote code execution vulnerability. The CVSSv3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) indicates network access with low attack complexity, requiring high privileges and no user interaction. The impact is high on confidentiality, integrity, ...

CVE-2025-21348 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-21344 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-21344 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Description of the security update for SharePoint Server Subscription Edition: January 14, 2025 (KB5002676)

None None...

Description of the security update for SharePoint Server 2019 Language Pack: January 14, 2025 (KB5002667)

None None...

Description of the security update for SharePoint Server 2019: January 14, 2025 (KB5002666)

None None...

Description of the security update for SharePoint Enterprise Server 2016 Language Pack: January 14, 2025 (KB5002671)

None None...

Description of the security update for SharePoint Enterprise Server 2016: January 14, 2025 (KB5002672)

None None...

Security Updates for Microsoft SharePoint Server Subscription Edition (January 2025)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL...

PT-2025-4223 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue allows remote attackers to execute arbitrary code, affecting the system. This can lead to significant security breaches, as attackers can run malicious code on...

PT-2025-4228 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue concerns a spoofing vulnerability in Microsoft SharePoint Server. This vulnerability is related to the failure to properly protect the web page structure, whic...

Security Updates for Microsoft SharePoint Server 2016 (January 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL 70300 C Tenable,...