CVE-2021-1712

Microsoft SharePoint Elevation of Privilege Vulnerability...

CVE-2021-1719 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2021-1719

Technical details about CVE-2021-1719 are not publicly provided in the connected documents. The materials reference SharePoint elevation of privilege but do not specify affected versions, root cause, or fixes. Monitor for updates.

CVE-2021-1718 Microsoft SharePoint Server Tampering Vulnerability

...

CVE-2021-1717

CVE-2021-1717 is a Microsoft SharePoint Server spoofing vulnerability. NVD data shows a CVSS v3.1 base score 5.4 (MEDIUM) with network access, no privileges required, but user interaction needed. Confidentiality and integrity impacts are marked as low; availability impact is none. Several Nessus/...

CVE-2021-1717 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2021-1718

CVE-2021-1718 is a Microsoft SharePoint Server Tampering vulnerability referenced across multiple sources. Connected documents identify affected software as SharePoint Server (notably older 2010 and later versions in Nessus entries) and classify the issue as tampering. The Nessus plugin for Secur...

CVE-2021-1718 Microsoft SharePoint Server Tampering Vulnerability

...

CVE-2021-1712 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2021-1712

CVE-2021-1712 is described in the provided documents as a Microsoft SharePoint elevation-of-privilege vulnerability. The NVD entry provides a CVSS v3.1 base score of 8.0 (NETWORK, LOW attack complexity, Privileges Required: LOW, User Interaction: REQUIRED, with HIGH confidentiality/integrity/avai...

CVE-2021-1707 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2021-1707

CVE-2021-1707 is a remote code execution vulnerability in Microsoft SharePoint Server. The linked EUVD/Nessus entries and CNVD page confirm it affects SharePoint Server variants and stems from insufficient input validation, enabling code execution by a remote attacker over the network with no use...

CVE-2021-1641 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2021-1641

CVE-2021-1641 is a session spoofing vulnerability affecting Microsoft SharePoint Server. The connected sources confirm affected products span SharePoint Server 2010 through 2019, with multiple related CVEs (e.g., CVE-2021-1707, CVE-2021-1712, CVE-2021-1715/1716/1717/1719) that were addressed in J...

Security Update for Microsoft SharePoint Foundation 2013 (KB4493175)

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Foundation 2013 (KB4493175) farm-deployment

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4493167) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4493163) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for SharePoint Foundation 2013: January 12, 2021

Description of the security update for SharePoint Foundation 2013: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...

Description of the security update for SharePoint Server 2010 Office Web Apps: January 12, 2021

Description of the security update for SharePoint Server 2010 Office Web Apps: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...