CVE-2021-31172 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2021-31172

CVE-2021-31172 is a Microsoft SharePoint Server spoofing vulnerability. Public docs here indicate the issue is addressed by the May 11, 2021 security update for SharePoint Server 2019 (KB5001916), which also covers related CVEs in the same bulletin. The CVE entry cites a SharePoint spoofing vulne...

Security Updates for Microsoft SharePoint Foundation Server 2013 (May 2021)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-28474, CVE-2021-31181 - Microsoft SharePoint Information Disclosure...

Security Updates for Microsoft SharePoint Server 2019 (May 2021)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-28474, CVE-2021-31181 - Microsoft SharePoint Information Disclosure...

SRC-2021-0018 : Microsoft SharePoint Server OAuth Authorization Code Leak Elevation of Privilege Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to elevate privileges. User interaction is required required to exploit this vulnerability. The specific flaw exists in the oauthauthorize page. The issue results from a missing X-Frame-Options header when performing an authorizati...