CVE-2025-21344 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Description of the security update for SharePoint Server Subscription Edition: January 14, 2025 (KB5002676)

None None...

Description of the security update for SharePoint Server 2019 Language Pack: January 14, 2025 (KB5002667)

None None...

Description of the security update for SharePoint Enterprise Server 2016 Language Pack: January 14, 2025 (KB5002671)

None None...

Description of the security update for SharePoint Server 2019: January 14, 2025 (KB5002666)

None None...

Description of the security update for SharePoint Enterprise Server 2016: January 14, 2025 (KB5002672)

None None...

Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Microsoft SharePoint Server Spoofing Vulnerability

...

Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Microsoft SharePoint 输入验证错误漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An input validation...

PT-2025-4228 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue concerns a spoofing vulnerability in Microsoft SharePoint Server. This vulnerability is related to the failure to properly protect the web page structure, whic...

PT-2025-4223 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue allows remote attackers to execute arbitrary code, affecting the system. This can lead to significant security breaches, as attackers can run malicious code on...

Security Updates for Microsoft SharePoint Server Subscription Edition (January 2025)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL...

PT-2025-4226

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue allows remote attackers to execute arbitrary code, affecting the system. This can lead to unauthorized access and control of the system. Recommendations At the...

Microsoft SharePoint 跨站脚本漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...

Microsoft SharePoint 授权问题漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. Microsoft SharePoint ...

CVE-2025-21393: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2025-21348: Improper Authorization

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2025-21344: Improper Input Validation

Microsoft SharePoint Server Remote Code Execution Vulnerability...

Security Updates for Microsoft SharePoint Server 2019 (January 2025)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL 70300 C Tenable,...