Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-73768)

SharePoint is a web-based collaboration platform that integrates with Microsoft Office.SharePoint Server is one of the versions of SharePoint that is installed on a customer's IT infrastructure and is designed to give an organization greater control over the behavior or design of...

Security Updates for Microsoft SharePoint Server 2013 (December 2020)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17089 - A remote code execution...

Security Updates for Microsoft SharePoint Server 2019 (December 2020)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17089 - A remote code execution...

Security Updates for Microsoft SharePoint Server 2016 (December 2020)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17089 - A remote code execution...

CVE-2020-17120

The CVE-2020-17120 entry corresponds to a Microsoft SharePoint Information Disclosure Vulnerability. Connected sources confirm it is part of multiple SharePoint Server vulnerabilities across several versions (2010, 2013, 2016, 2019) and is listed among updates released in December 2020. The vulne...

CVE-2020-17121 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-17120 Microsoft SharePoint Information Disclosure Vulnerability

...

CVE-2020-17121

No concrete technical details for CVE-2020-17121 are present in the provided connected documents; they only reference it among December 2020 SharePoint updates without specifics on affected components or root cause.

CVE-2020-17118 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-17118

CVE-2020-17118 is a remote code execution vulnerability in Microsoft SharePoint Server. The connected documents confirm it affects multiple SharePoint Server versions (2010, 2013, 2016, 2019) and that systems missing security updates are affected. No explicit root-cause details are provided in th...

CVE-2020-17115

CVE-2020-17115 is described across connected sources as a session spoofing vulnerability in Microsoft SharePoint Server. The provided Nessus plugin entries group this CVE with other SharePoint CVEs and indicate vulnerable state when updates are missing (e.g., December 2020 security updates). Conc...

CVE-2020-17115 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2020-17089 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2020-17089

CVE-2020-17089 is a Microsoft SharePoint elevation-of-privilege vulnerability reported across multiple advisories. Connected sources confirm the issue affects SharePoint Server instances and is associated with related CVEs (e.g., CVE-2020-17115, CVE-2020-17118, CVE-2020-17120, CVE-2020-17121, CVE...

Microsoft SharePoint Site Import Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the ImportWeb function. The issue results from the lack of proper validation of a...

SRC-2021-0003 : Microsoft SharePoint Server SPSqlDataSource Information Disclosure Vulnerability (patch bypass)

Vulnerability Details: This vulnerability allows remote attackers to disclose sensitive information on affected installations of SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the SPSqlDataSource class. The issue results from the lack ...

Patch Tuesday, Good Riddance 2020 Edition

Microsoft today issued its final batch of security updates for Windows PCs in 2020, ending the year with a relatively light patch load. Nine of the 58 security vulnerabilities addressed this month earned Microsofts most-dire "critical" label, meaning they can be abused by malware or miscreants to...

December 2020 Patch Tuesday – 58 Vulnerabilities, 9 Critical, Windows Exchange, Hyper-V, SharePoint, Adobe

This month’s Microsoft Patch Tuesday addresses 58 vulnerabilities with 9 of them labeled as Critical. The 9 Critical vulnerabilities cover Exchange, SharePoint, Hyper-V, Chakra Scripting, and several other workstation vulnerabilities. Adobe released patches today for Experience Manager, Prelude,...

Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4486753) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Foundation 2013 (KB4493138) farm-deployment

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...