Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2023-72199)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...

CVE-2023-28288

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2023-28288

Microsoft SharePoint Server Spoofing Vulnerability...

Spoofing

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2023-28288

CVE-2023-28288 is a network-exploitable spoofing vulnerability affecting Microsoft SharePoint Server families. Public references (Exploit-DB entry) show a remote exploit against SharePoint Enterprise Server 2016, aligning with the vulnerability class described as spoofing in the CVE record. The C...

CVE-2023-28288 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2023-28288 Microsoft SharePoint Server Spoofing Vulnerability

...

Description of the security update for SharePoint Server Subscription Edition: April 11, 2023 (KB5002375)

None None...

Description of the security update for SharePoint Server 2019: April 11, 2023 (KB5002373)

None None...

April 11, 2023, cumulative update for SharePoint Enterprise Server 2013 (KB5002381)

None None...

Description of the security update for SharePoint Foundation 2013: April 11, 2023 (KB5002383)

Description of the security update for SharePoint Foundation 2013: April 11, 2023 KB5002383 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see ​​​​Microsoft Common Vulnerabilities and Exposures CVE-2023-28288...

Description of the security update for SharePoint Enterprise Server 2016: April 11, 2023 (KB5002385)

None None...

Microsoft SharePoint Server Spoofing Vulnerability

...

Microsoft SharePoint WSSXmlUrlResolver Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the WSSXmlUrlResolver class. The issue results from the lack of proper validati...

CVE-2023-28288: Server-Side Request Forgery (SSRF)

Microsoft SharePoint Server Spoofing Vulnerability...

KLA48823 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Word can be exploited remotely to execute...

Security Updates for Microsoft SharePoint Server Subscription Edition (March 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a Sharepoint server spoofing vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Security Updates for Microsoft SharePoint Server 2013 (April 2023)

The Microsoft SharePoint Foundation 2013 installation on the remote host is missing security updates. It is, therefore, affected by a Sharepoint server spoofing vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid174115;...

Security Updates for Microsoft SharePoint Server 2019 (April 2023)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a Sharepoint server spoofing vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid174117;...

Security Updates for Microsoft SharePoint Server 2016 (April 2023)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a Sharepoint server spoofing vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid174109;...