PT-2023-2720

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue is related to a remote code execution vulnerability in Microsoft SharePoint Server. This vulnerability allows an authenticated attacker with Site Owner privilege...

Microsoft SharePoint 安全漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

Microsoft SharePoint Chart Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of charts. Tampering with client-side data can trigger the...

Sharepoint Dynamic Proxy Generator Unauth RCE

This module exploits two vulnerabilities in Sharepoint 2019, an auth bypass CVE-2023-29357 which was patched in June of 2023 and CVE-2023-24955, an RCE which was patched in May of 2023. The auth bypass allows attackers to impersonate the Sharepoint Admin user. This vulnerability stems from the...

The vulnerability of Microsoft SharePoint Server software allows a perpetrator to compromise the integrity of protected information.

The vulnerability of Microsoft SharePoint Server packages is related to insufficient testing of requests on the server side. Exploiting this vulnerability allows a malicious actor to affect the integrity of protected information through a specially crafted HTTP request...

Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2023-72199)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...

CVE-2023-28288

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2023-28288

Microsoft SharePoint Server Spoofing Vulnerability...

Spoofing

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2023-28288

CVE-2023-28288 is a network-exploitable spoofing vulnerability affecting Microsoft SharePoint Server families. Public references (Exploit-DB entry) show a remote exploit against SharePoint Enterprise Server 2016, aligning with the vulnerability class described as spoofing in the CVE record. The C...

CVE-2023-28288 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2023-28288 Microsoft SharePoint Server Spoofing Vulnerability

...

Description of the security update for SharePoint Enterprise Server 2016: April 11, 2023 (KB5002385)

None None...

April 11, 2023, cumulative update for SharePoint Enterprise Server 2013 (KB5002381)

None None...

Microsoft SharePoint Server Spoofing Vulnerability

...

Description of the security update for SharePoint Server 2019: April 11, 2023 (KB5002373)

None None...

Description of the security update for SharePoint Foundation 2013: April 11, 2023 (KB5002383)

Description of the security update for SharePoint Foundation 2013: April 11, 2023 KB5002383 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see ​​​​Microsoft Common Vulnerabilities and Exposures CVE-2023-28288...

Description of the security update for SharePoint Server Subscription Edition: April 11, 2023 (KB5002375)

None None...

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious person could exploit the vulnerabilities to execute arbitrary code with the victim's privileges. The malicious party must trick the victim into opening a malicious file to open. The vulnerability in Sharepoint allows an...

Microsoft SharePoint 安全漏洞

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...