CVE-2025-21400 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Security Updates for Microsoft SharePoint Server 2019 (February 2025)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a Remote Code Execution Vulnerability %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid216130;...

Security Updates for Microsoft SharePoint Server 2016 (February 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a Remote Code Execution Vulnerability %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid216137;...

CVE-2025-21393

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2025-21348

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2025-21393

CVE-2025-21393 affects Microsoft SharePoint Server (on‑prem). The vulnerability is described as a spoofing flaw that could allow impersonation of another user, with CVSS‑3.1 base metrics: Network access, low attack complexity, privileges required Low, user interaction required, confidentiality im...

CVE-2025-21348

CVE-2025-21348 is a Microsoft SharePoint Server remote code execution vulnerability. The CVSSv3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) indicates network access with low attack complexity, requiring high privileges and no user interaction. The impact is high on confidentiality, integrity, ...

CVE-2025-21348 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-21344 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-21344 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Security Updates for Microsoft SharePoint Server Subscription Edition (January 2025)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL...

Security Updates for Microsoft SharePoint Server 2016 (January 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL 70300 C Tenable,...

Security Updates for Microsoft SharePoint Server 2019 (January 2025)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL 70300 C Tenable,...

Security Updates for Microsoft SharePoint Server Subscription Edition (December 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Security Updates for Microsoft SharePoint Server 2016 (December 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability. CVE-2024-49068 - A remote code execution vulnerability. CVE-2024-49065, CVE-2024-49070 - A Information...

Microsoft SharePoint Server FindSpecific Unsafe Reflection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the FindSpecific method. The process does not properly...

Defense-in-Depth Security Updates for Microsoft SharePoint Server 2019 (November 2024)

The Microsoft SharePoint Server 2019 installation is missing defense-in-depth security updates to help improve security-related features. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211460; scriptversion"1.2";...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and SharePoint Enterprise Server lies in their lack of access control mechanisms, which allows attackers to increase their privileges.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and SharePoint Enterprise Server is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...

Security Updates for Microsoft SharePoint Server 2019 (October 2024)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid208291;...