Security Updates for Microsoft SharePoint Foundation 2013 (February 2023)

The Microsoft SharePoint Foundation 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Description of the security update for SharePoint Foundation 2013: June 13, 2017

Description of the security update for SharePoint Foundation 2013: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microso...

CVE-2018-0947: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Foundation 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...

CVE-2017-8745: Improper Neutralization of Input During Web Page Generation

An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Cross Site Scripting Vulnerability"...

PT-2017-18506

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft SharePoint Server affected versions not specified Description The issue arises from improper sanitization of specially crafted web requests to an affected SharePoint server. An...

CVE-2017-0255: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka "Microsoft SharePoint XSS Vulnerability"...

Microsoft SharePoint Foundation RCE Vulnerability (KB3162054)

This host is missing an important security update for Microsoft SharePoint Foundation according to Microsoft KB3162054 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PT-2017-10477

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation 2013 SP1 SharePoint Server affected versions not specified Description The issue arises when the software does not properly sanitize a specially crafted web request, allowing an elevation of privilege. An...

CVE-2016-0039

Cross-site scripting XSS vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...

CVE-2016-0039: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...

PT-2016-1235

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation 2013 SP1 Description A cross-site scripting XSS issue exists due to inadequate protection of the web page structure, allowing remote attackers to inject arbitrary web script or HTML via a crafted request. This c...

PT-2016-1060

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2013 SP1 Microsoft SharePoint Foundation 2013 SP1 Description The issue exists due to inadequate protection of the web page structure in Microsoft SharePoint, allowing a remote attacker to bypass existing access...

PT-2016-1050

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2013 SP1 Microsoft SharePoint Foundation 2013 SP1 Description The issue allows remote authenticated users to bypass intended Access Control Policy restrictions. This can be achieved by modifying a webpart, which can...

PT-2015-2336

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2013 SP1 Microsoft SharePoint Foundation 2013 SP1 Description A security feature bypass issue exists due to inadequate protection of the web page structure, allowing remote authenticated users to inject arbitrary we...

CVE-2015-2522: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content, aka "Microsoft SharePoint XSS Spoofing Vulnerability."...

PT-2015-2013

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation 2013 SP1 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via crafted content. This could enable an...

PT-2015-5430

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2007 SP3 Microsoft SharePoint Foundation 2010 SP2 Microsoft SharePoint Server 2010 SP2 Microsoft SharePoint Foundation 2013 SP1 Description The issue allows remote authenticated users to execute arbitrary code via...

PT-2015-1080

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation 2013 SP1 Microsoft SharePoint Server 2013 SP1 Description The issue is related to an elevation of privilege vulnerability that exists when SharePoint Server improperly sanitizes a specially crafted request to an...

CVE-2015-1653: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...

CVE-2015-1636: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."...