10120 matches found
Investigating a SharePoint Compromise: IR Tales from the Field
Executive summary Rapid7’s Incident Response team recently investigated a Microsoft Exchange service account with domain administrator privileges. Our investigation uncovered an attacker who accessed a server without authorization and moved laterally across the network, compromising the entire...
Investigating a SharePoint Compromise: IR Tales from the Field
Executive summary Rapid7’s Incident Response team recently investigated a Microsoft Exchange service account with domain administrator privileges. Our investigation uncovered an attacker who accessed a server without authorization and moved laterally across the network, compromising the entire...
The severity of the Remote Code Execution – Microsoft SharePoint (CVE-2024-38094) vulnerability has increased
The severity of the Remote Code Execution - Microsoft SharePoint CVE-2024-38094 vulnerability has increased. It was fixed as part of the July Microsoft Patch Tuesday July 9. SharePoint is a popular platform for corporate portals. According to the Microsoft bulletin, аn authenticated attacker with...
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)
A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-38094 CVSS score: 7.2,...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38094link is external link is externalMicrosoft SharePoint Deserialization Vulnerability These types of vulnerabilities are frequent attack vectors for malicious...
Microsoft SharePoint Deserialization Vulnerability
Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution...
Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2024-44526)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation of...
VulnCheck KEV: CVE-2024-38094
Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and SharePoint Enterprise Server lies in their lack of access control mechanisms, which allows attackers to increase their privileges.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and SharePoint Enterprise Server is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...
Microsoft Detects Growing Use of File Hosting Services in Business Email Compromise Attacks
Microsoft is warning of cyber attack campaigns that abuse legitimate file hosting services such as SharePoint, OneDrive, and Dropbox that are widely used in enterprise environments as a defense evasion tactic. The end goal of the campaigns are broad and varied, allowing threat actors to compromis...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in Office components. A malicious person could exploit the vulnerabilities to execute arbitrary code with the victim's privileges, potentially gaining access to sensitive data in the victim's context. Successful exploitation requires the malicious party to tric...
CVE-2024-43503
Microsoft SharePoint Elevation of Privilege Vulnerability...
CVE-2024-43503
Microsoft SharePoint Elevation of Privilege Vulnerability...
CVE-2024-43503
CVE-2024-43503 – Microsoft SharePoint Elevation of Privilege affects on‑premises SharePoint deployments (Server). The vulnerability is described as an elevation of privileges issue in SharePoint, enabling a local attacker with low privileges and no user interaction to escalate to high integrity/i...
CVE-2024-43503 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2024-43503 Microsoft SharePoint Elevation of Privilege Vulnerability
...
Description of the security update for SharePoint Enterprise Server 2016: October 8, 2024 (KB5002645)
None None...
Description of the security update for SharePoint Server Subscription Edition: October 8, 2024 (KB5002649)
None None...
