CVE-2021-43242 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2021-43242

CVE-2021-43242 is a Microsoft SharePoint Server spoofing vulnerability. Connected sources indicate the issue affects multiple SharePoint Server editions (2013/2016/2019 and SharePoint Server Subscription Edition) and is described as a session spoofing flaw that can allow an attacker to perform ac...

CVE-2021-42320

CVE-2021-42320 is a spoofing vulnerability affecting Microsoft SharePoint Server (including Subscription Edition and on-premises releases like 2016/2019). Exploitation could allow an attacker to perform actions with the privileges of another user. Microsoft’s December 2021 security update KB50020...

CVE-2021-42320 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2021-42309

CVE-2021-42309 is a remote code execution vulnerability in Microsoft SharePoint Server identified across multiple SharePoint versions (2013/2016/2019 and Subscription Edition). Public sources in the connected documents describe an RCE vector that allows an attacker to bypass authentication or exe...

CVE-2021-42309 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2021-42294 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2021-42294

CVE-2021-42294 is a Microsoft SharePoint Server remote code execution vulnerability. Affected products include SharePoint Server 2013/2016/2019 (including Subscription Edition). Public remediation exists via December 2021 security updates (e.g., KB5002054 for SharePoint Server 2019; associated MS...

CVE-2021-42320: Authentication Bypass by Spoofing

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2021-42309: Improper Control of Generation of Code

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2021-43242: Undefined Security Weakness

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2021-42294: Undefined Security Weakness

Microsoft SharePoint Server Remote Code Execution Vulnerability...

Description of the security update for SharePoint Server 2019 Language Pack: December 14, 2021 (KB5002061)

None None...

Description of the security update for SharePoint Foundation 2013: December 14, 2021 (KB5002071)

Description of the security update for SharePoint Foundation 2013: December 14, 2021 KB5002071 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerabilities, s...

Description of the security update for SharePoint Server Subscription Edition Language Pack: December 14, 2021 (KB5002047)

None None...

Description of the security update for SharePoint Server 2019: December 14, 2021 (KB5002054)

None None...

Description of the security update for SharePoint Enterprise Server 2016: December 14, 2021 (KB5002059)

None None...

Description of the security update for SharePoint Server Subscription Edition: December 14, 2021 (KB5002045)

None None...

Description of the security update for SharePoint Enterprise Server 2016: December 14, 2021 (KB5002055)

None None...

Description of the security update for SharePoint Foundation 2013: December 14, 2021 (KB5002015)

Description of the security update for SharePoint Foundation 2013: December 14, 2021 KB5002015 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...