8892 matches found
PT-2022-2910 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SharePoint products, allowing a remote attack...
Vulnerabilities fixed in Microsoft Office
Vulnerabilities have been fixed in Microsoft Office products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Remote code execution User rights. Spoofing Access to sensitive data The tables below provide an...
Security Updates for Microsoft SharePoint Server 2016 (April 2022)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-24472 ...
Security Updates for Microsoft SharePoint Server 2019 (April 2022)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a session spoofing vulnerability. An attacker can exploit this to perform actions with the privileges of another user. %NASLMINLEVEL 70300 C Tenable Network Security, In...
Microsoft Office Sharepoint Server安全漏洞
Microsoft SharePoint is a suite of enterprise business collaboration platforms from Microsoft Corporation USA. Microsoft SharePoint Server is vulnerable to spoofing and no details of the vulnerability are currently available...
Security Updates for Microsoft SharePoint Server Subscription Edition (April 2022)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user...
Security Updates for Microsoft SharePoint Server 2013 (April 2022)
The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-24472 ...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and SharePoint Enterprise Server lies in improper code generation management, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and SharePoint Enterprise Server is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
On-Premises Servers Products are Here! Introducing the Applications and On-Premises Servers Bug Bounty Program
Microsoft is excited to announce the addition of Exchange on-premises, SharePoint on-premises, and Skype for Business on-premises to the Applications and On-Premises Servers Bounty Program. Through this expanded program, we encourage researchers to discover and report high-impact security...
On-Premises Servers Products are Here! Introducing the Applications and On-Premises Servers Bug Bounty Program
Microsoft is excited to announce the addition of Exchange on-premises, SharePoint on-premises, and Skype for Business on-premises to the Applications and On-Premises Servers Bounty Program. Through this expanded program, we encourage researchers to discover and report high-impact security...
April 5, 2022, update for Office 2016 (KB5002141)
None None...
The vulnerability of the Microsoft SharePoint software package, related to errors in information presentation on the user interface, allows a hacker to perform a spoofing attack.
The vulnerability of the Microsoft SharePoint software is related to errors in information presentation at the user interface level. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...
The vulnerability of the Microsoft SharePoint Server software, related to errors in information presentation on the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of the Microsoft SharePoint Server software is related to errors in information presentation at the user interface level. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
The vulnerability of the Microsoft SharePoint Server software, related to errors in information presentation on the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of the Microsoft SharePoint Server software is related to errors in information presentation at the user interface level. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to escalate their privileges.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of Microsoft SharePoint Server software, related to improper code generation management, allows a malicious actor to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server packages is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created request from a remote location...
Patch Tuesday - March 2022
Microsoft's March 2022 updates include fixes for 92 CVEs including 21 from the Chromium project, which is used by their Edge web browser. None of them have been seen exploited in the wild, but three have been previously disclosed. CVE-2022-24512, affecting .NET and Visual Studio, and...
ZOHO ManageEngine SharePoint Manager Plus权限提升漏洞
ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. An elevation of privilege vulnerability exists in versions of ZOHO ManageEngine SharePoint Manager Plus prior to 4329, which could be exploited by an attacker to cause sensitive data to be...
ZOHO ManageEngine SharePoint Manager Plus Licensing Issue Vulnerability
ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. An authorization issue vulnerability exists in versions prior to ZOHO ManageEngine SharePoint Manager Plus 4329, which stems from a network system or The vulnerability is caused by a lack of...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server packages allows attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks...