CVE-2023-21717

CVE-2023-21717 affects Microsoft SharePoint Server as an Elevation of Privilege vulnerability. Connected sources confirm affected SharePoint Server family (2013/2016/2019 and Subscription/Foundation variants) with multiple references to CVE-21717 and CVE-21716; the exact root cause is not detaile...

CVE-2023-21717 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

Security Bulletin: CVE-2022-3676 may affect Eclipse Openj9 used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint

Summary CVE-2022-3676 vulnerability in Eclipse Openj9 could allow a remote attacker to bypass security restrictions, caused by improper runtime type check by the interface calls. Vulnerability Details CVEID:CVE-2022-3676 DESCRIPTION: Eclipse Openj9 could allow a remote attacker to bypass security...

Security Bulletin: CVE-2022-21624 may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint

Summary CVE-2022-21624 was disclosed in the Oracle October 2022 Critical Patch Update. Vulnerability Details CVEID:CVE-2022-21624 DESCRIPTION: An unspecified vulnerability in Java SE related to the Security component could allow an unauthenticated attacker to update, insert or delete data resulti...

Description of the security update for SharePoint Enterprise Server 2016: February 14, 2023 (KB5002350)

None None...

Description of the security update for SharePoint Server Subscription Edition: February 14, 2023 (KB5002353)

None None...

Description of the security update for SharePoint Server Subscription Edition Language Pack: February 14, 2023 (KB5002352)

None None...

Description of the security update for SharePoint Server 2019 Language Pack: February 14, 2023 (KB5002330)

None None...

Description of the security update for SharePoint Foundation 2013: February 14, 2023 (KB5002347)

Description of the security update for SharePoint Foundation 2013: February 14, 2023 KB5002347 Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability and Microsoft Word remote code execution vulnerability. To learn more about the vulnerabilities,...

February 14, 2023, cumulative update for SharePoint Enterprise Server 2013 (KB5002346)

None None...

Description of the security update for SharePoint Enterprise Server 2016 Language Pack: February 14, 2023 (KB5002325)

None None...

Description of the security update for SharePoint Server 2019: February 14, 2023 (KB5002342)

None None...

Description of the security update for SharePoint Enterprise Server 2013: February 14, 2023 (KB5002312)

None None...

Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2023-21717: Improper Access Control

Microsoft SharePoint Server Elevation of Privilege Vulnerability...

VulnCheck KEV: CVE-2020-1210

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...

PT-2023-1604 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient access control in Microsoft SharePoint Server, allowing a remote attacker to elevate their privileges. Recommendations: At the momen...

KLA20229 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote code...

Microsoft SharePoint 安全漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation o...

libreoffice: Macro URL arbitrary script execution

A vulnerability was found in LibreOffice that affects the Office URI Schemes. These schemes enable browser integration of LibreOffice with the MS SharePoint server. In LibreOffice, the links using the scheme 'vnd.libreoffice.command' could be constructed to call internal macros with arbitrary...