Security Updates for Microsoft SharePoint Server 2013 (November 2020)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An Information Disclosure Vulnerability exists in Microsoft SharePoint. CVE-2020-16979, CVE-2020-17017 - A Spoofing Vulnerability exists in...

Security Updates for Microsoft SharePoint Server 2016 (November 2020)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An Information Disclosure Vulnerability exists in Microsoft SharePoint. CVE-2020-16979, CVE-2020-17017 - A Spoofing Vulnerability exists in...

CVE-2020-16979

Microsoft SharePoint Information Disclosure Vulnerability...

CVE-2020-16979

CVE-2020-16979 is an Information Disclosure Vulnerability in Microsoft SharePoint. Connected documents confirm the issue affects SharePoint Server installations and is addressed via November 2020 security updates (e.g., MS20-4486x/MS20-4487x). The exact root cause details are not disclosed in the...

SRC-2020-0023 : Microsoft SharePoint Server SoapDataSource GetResponseString Server-Side Request Forgery Information Disclosure Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to disclose information on affected installations of SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the SoapDataSource class. The issue results from the lack of proper...