8860 matches found
CVE-2024-10839
CVE-2024-10839 affects Zohocorp/ManageEngine SharePoint Manager Plus (versions 4503 and prior). The vulnerability is an authenticated XML External Entity (XXE) issue in the Management option. Impact is described as high confidentiality impact and partial availability impact per the NVD metrics. N...
CVE-2024-10839 XML External Entity
Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity XXE in the Management option...
PT-2024-16580 · Zoho · Zoho Manageengine Sharepoint Manager Plus
Name of the Vulnerable Software and Affected Versions: ManageEngine SharePoint Manager Plus versions 4503 and prior Description: The issue is an authenticated XML External Entity XXE vulnerability in the Management option. This vulnerability impacts specific versions of the software, allowing...
ZOHO ManageEngine SharePoint Manager Plus 安全漏洞
ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. It helps you manage, audit, and report on your local and Office 365 SharePoint environments. It also allows you to monitor, track and analyze all activities in your SharePoint infrastructure t...
VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware
An ongoing threat campaign dubbed VEILDrive has been observed taking advantage of legitimate services from Microsoft, including Teams, SharePoint, Quick Assist, and OneDrive, as part of its modus operandi. "Leveraging Microsoft SaaS services — including Teams, SharePoint, Quick Assist, and OneDri...
Investigating a SharePoint Compromise: IR Tales from the Field
Executive summary Rapid7’s Incident Response team recently investigated a Microsoft Exchange service account with domain administrator privileges. Our investigation uncovered an attacker who accessed a server without authorization and moved laterally across the network, compromising the entire...
Investigating a SharePoint Compromise: IR Tales from the Field
Executive summary Rapid7’s Incident Response team recently investigated a Microsoft Exchange service account with domain administrator privileges. Our investigation uncovered an attacker who accessed a server without authorization and moved laterally across the network, compromising the entire...
The severity of the Remote Code Execution – Microsoft SharePoint (CVE-2024-38094) vulnerability has increased
The severity of the Remote Code Execution - Microsoft SharePoint CVE-2024-38094 vulnerability has increased. It was fixed as part of the July Microsoft Patch Tuesday July 9. SharePoint is a popular platform for corporate portals. According to the Microsoft bulletin, аn authenticated attacker with...
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)
A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-38094 CVSS score: 7.2,...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38094link is external link is externalMicrosoft SharePoint Deserialization Vulnerability These types of vulnerabilities are frequent attack vectors for malicious...
Microsoft SharePoint Deserialization Vulnerability
Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution...
Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2024-44526)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation of...
VulnCheck KEV: CVE-2024-38094
Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and SharePoint Enterprise Server lies in their lack of access control mechanisms, which allows attackers to increase their privileges.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and SharePoint Enterprise Server is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...
Microsoft Detects Growing Use of File Hosting Services in Business Email Compromise Attacks
Microsoft is warning of cyber attack campaigns that abuse legitimate file hosting services such as SharePoint, OneDrive, and Dropbox that are widely used in enterprise environments as a defense evasion tactic. The end goal of the campaigns are broad and varied, allowing threat actors to compromis...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in Office components. A malicious person could exploit the vulnerabilities to execute arbitrary code with the victim's privileges, potentially gaining access to sensitive data in the victim's context. Successful exploitation requires the malicious party to tric...
CVE-2024-43503
Microsoft SharePoint Elevation of Privilege Vulnerability...
CVE-2024-43503
Microsoft SharePoint Elevation of Privilege Vulnerability...
CVE-2024-43503
CVE-2024-43503 – Microsoft SharePoint Elevation of Privilege affects on‑premises SharePoint deployments (Server). The vulnerability is described as an elevation of privileges issue in SharePoint, enabling a local attacker with low privileges and no user interaction to escalate to high integrity/i...