10213 matches found
CVE-2021-31181
CVE-2021-31181 – Microsoft SharePoint RCE is caused by EditingPageParser.VerifyControlOnSafeList failing to validate user input, enabling an attacker with SPBasePermissions.ManageLists to craft a SOAP payload that leaks the ViewState validation key and deserializes via LosFormatter (ysoserial.NET...
CVE-2021-31173 Microsoft SharePoint Server Information Disclosure Vulnerability
...
CVE-2021-31172
CVE-2021-31172 is a Microsoft SharePoint Server spoofing vulnerability. Public docs here indicate the issue is addressed by the May 11, 2021 security update for SharePoint Server 2019 (KB5001916), which also covers related CVEs in the same bulletin. The CVE entry cites a SharePoint spoofing vulne...
CVE-2021-31172 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2021-31172 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2021-31173 Microsoft SharePoint Server Information Disclosure Vulnerability
...
CVE-2021-31173
CVE-2021-31173 is a Microsoft SharePoint Server Information Disclosure vulnerability. Public sources (NVD) assign a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction) with a high potential impact to confidentiality and no impact to integrity...
CVE-2021-31171
Technical details about CVE-2021-31171 are not publicly provided in the supplied documents; monitor for updates.
CVE-2021-31171 Microsoft SharePoint Information Disclosure Vulnerability
...
CVE-2021-28478 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2021-28478 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2021-28478
Technical details about CVE-2021-28478 are not provided in the connected documents. They only reference a SharePoint spoofing vulnerability without specific affected versions, vectors, or remediation. Monitor official disclosures and patches for updates.
CVE-2021-28474 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2021-28474
CVE-2021-28474 maps to a Microsoft SharePoint Server remote code execution vulnerability. Public details within the provided docs are limited to high‑level descriptions (SharePoint Server RCE) and CVSS metrics; no explicit exploit vectors or affected versions are stated in Connected documents. Th...
CVE-2021-26418 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2021-26418
Microsoft SharePoint Server 2019 is affected by CVE-2021-26418 (Spoofing). The vulnerability is addressed by the May 11, 2021 security update KB5001916, which resolves the spoofing issue alongside related fixes. The update fixes remote-code-execution/spoofing concerns and requires installing KB50...
CVE-2021-26418 Microsoft SharePoint Server Spoofing Vulnerability
...
Security Update for Microsoft SharePoint Enterprise Server 2016 (KB5001917) farm-deployment
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
