PT-2024-9389 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to incorrect restriction of XML external entities in Microsoft SharePoint, which can be exploited by a remote attacker to gain unauthorized access to...

Microsoft SharePoint 代码问题漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

PT-2024-9502 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is...

Security Updates for Microsoft SharePoint Server 2016 (December 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability. CVE-2024-49068 - A remote code execution vulnerability. CVE-2024-49065, CVE-2024-49070 - A Information...

PT-2024-9358

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to a deserialization mechanism flaw in Microsoft SharePoint, allowing remote attackers to execute arbitrary code and affect the system. This can potentiall...

Microsoft SharePoint 代码问题漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A code execution...

CVE-2024-49070: Deserialization of Untrusted Data

Microsoft SharePoint Remote Code Execution Vulnerability...

CVE-2024-49064: Improper Restriction of XML External Entity Reference

Microsoft SharePoint Information Disclosure Vulnerability...

CVE-2024-49068: Improper Access Control

Microsoft SharePoint Elevation of Privilege Vulnerability...

CVE-2024-49062: Relative Path Traversal

Microsoft SharePoint Information Disclosure Vulnerability...

Security Updates for Microsoft SharePoint Server 2019 (December 2024)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid212234;...

Microsoft SharePoint 访问控制错误漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation of...

Microsoft Office Sharepoint Server 安全漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

PT-2024-9518 · Microsoft · Sharepoint Server +3

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps affected versions not specified Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description...

PT-2024-9388 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to inadequate access control in Microsoft SharePoint, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the...

Security Updates for Microsoft SharePoint Server Subscription Edition (December 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

KLA78027 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft SharePoint can ...

Microsoft SharePoint Server FindSpecific Unsafe Reflection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the FindSpecific method. The process does not properly...

Defense-in-Depth Security Updates for Microsoft SharePoint Server Subscription Edition (November 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing defense-in-depth security updates to help improve security-related features. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211459;...

Defense-in-Depth Security Updates for Microsoft SharePoint Server 2019 (November 2024)

The Microsoft SharePoint Server 2019 installation is missing defense-in-depth security updates to help improve security-related features. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211460; scriptversion"1.2";...