Security Updates for Microsoft SharePoint Server 2016 (July 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Server Spoofing Vulnerability. CVE-2025-49706 - Remote Code Execution Vulnerabilites. CVE-2025-49701, CVE-2025-49703, CVE-2025-49704...

Security Updates for Microsoft SharePoint Server 2016 (May 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability CVE-2025-29976 - Remote Code Execution Vulnerabilites. CVE-2025-30378, CVE-2025-30382, CVE-2025-30384...

Security Updates for Microsoft SharePoint Server 2016 (February 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a Remote Code Execution Vulnerability %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid216137;...

Security Updates for Microsoft SharePoint Server 2016 (December 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability. CVE-2024-49068 - A remote code execution vulnerability. CVE-2024-49065, CVE-2024-49070 - A Information...

Security Updates for Microsoft SharePoint Server 2016 (February 2023)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Security Updates for Microsoft SharePoint Server 2016 (November 2022)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-41060,...

Language Security Updates Security Updates for Microsoft Sharepoint 2016 (March 2021)

The Microsoft SharePoint Server 2016 installation on the remote host is missing language security updates. It is, therefore, affected by Microsoft SharePoint Spoofing Vulnerability CVE-2021-24104 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Security Updates for Microsoft SharePoint Server 2016 (April 2022)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-24472 ...

Security Updates for Microsoft SharePoint Server 2016 (December 2021)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-42320,...

Security Updates for Microsoft SharePoint Server 2016 (February 2022)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21987 ...

Security Updates for Microsoft Sharepoint 2016 (September 2021)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple Server Spoofing Vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Security Updates for Microsoft SharePoint Server 2016 (February 2021)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24071 - A sessi...

Security Updates for Microsoft SharePoint Server 2016 (November 2020)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An Information Disclosure Vulnerability exists in Microsoft SharePoint. CVE-2020-16979, CVE-2020-17017 - A Spoofing Vulnerability exists in...

Microsoft SharePoint Server 2016 < 16.0.5005.1000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application...

Microsoft Office SharePoint Server 2016 - Denial of Service Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sharepoint-ruby' class MetasploitModule 'DOS Vulnerability in SharePoint 2016 Server', 'Description' = %q A vulnerability in Microsoft SharePoint Server could...

PT-2018-9114

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server 2016 Description: The issue arises from how web requests are handled, allowing an elevation of privilege. An authenticated attacker could exploit this by sending a specially crafted request to an affected server,...

CVE-2018-0790: Undefined Security Weakness

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0789...

CVE-2018-0789: Undefined Security Weakness

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0790...

PT-2018-9070

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Foundation 2010 Microsoft SharePoint Server 2013 Microsoft SharePoint Server 2016 Description: An elevation of privilege issue exists due to improper sanitization of specially crafted web requests to affected SharePoint...