April 11, 2023, cumulative update for SharePoint Enterprise Server 2013 (KB5002381)

None None...

March 14, 2023, cumulative update for SharePoint Enterprise Server 2013 (KB5002366)

None None...

Security Updates for Microsoft SharePoint Server 2013 (March 2023)

The Microsoft SharePoint Foundation 2013 installation on the remote host is missing security updates. It is, therefore, affected by a Sharepoint server spoofing vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid172534;...

Security Updates for Microsoft SharePoint Server 2013 (September 2021)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple Server Spoofing Vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Security Updates for Microsoft SharePoint Server 2013 (January 2021)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-1641,...

Security Updates for Microsoft SharePoint Server 2013 (November 2020)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An Information Disclosure Vulnerability exists in Microsoft SharePoint. CVE-2020-16979, CVE-2020-17017 - A Spoofing Vulnerability exists in...

Security Updates for Microsoft SharePoint Server 2013 (October 2020)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who...

Microsoft SharePoint Server 2013 build < 15.0.5163.1000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects. - A remote code execution vulnerabilit...

MS15-022: Description of the security update for Office Web Apps Server 2013: March 10, 2015

Resolves vulnerabilities in Office Web Apps Server 2013 that could allow remote code execution if an authenticated attacker sends specially crafted page content to a targeted computer that is running SharePoint Server.IntroductionThis update resolves vulnerabilities in Microsoft Office Web Apps...

Description of the security update for SharePoint Server 2013: May 9, 2017

Description of the security update for SharePoint Server 2013: May 9, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

Description of the security update for SharePoint Enterprise Server 2013: April 10, 2018

None None...

CVE-2018-0789: Undefined Security Weakness

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0790...

CVE-2018-0790: Undefined Security Weakness

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0789...

PT-2018-9070

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Foundation 2010 Microsoft SharePoint Server 2013 Microsoft SharePoint Server 2016 Description: An elevation of privilege issue exists due to improper sanitization of specially crafted web requests to affected SharePoint...

CVE-2017-8629: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint XSS Vulnerability"...

PT-2017-18447

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2013 Service Pack 1 Description The issue arises when Microsoft SharePoint Server fails to properly sanitize a specially crafted web request to an affected SharePoint server. This allows an attacker to perform...

PT-2017-18504

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint 2007 Service Pack 3 Microsoft PowerPoint 2010 Service Pack 2 Microsoft PowerPoint 2013 Service Pack 1 Microsoft PowerPoint 2013 RT Service Pack 1 Microsoft PowerPoint 2016 Microsoft PowerPoint Viewer 2007 Microsoft...

MS14-017: Description of the security update for Word Automation Services in Microsoft SharePoint Server 2013: April 8, 2014

MS14-017: Description of the security update for Word Automation Services in Microsoft SharePoint Server 2013: April 8, 2014 View products that this article applies to. Introduction This update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially...

MS14-001: Description of the security update for Word Automation Services in Microsoft SharePoint Server 2013: January 14, 2014

MS14-001: Description of the security update for Word Automation Services in Microsoft SharePoint Server 2013: January 14, 2014 INTRODUCTION Microsoft has released security bulletin MS14-001. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

CVE-2016-0011: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting XSS attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different...