3454 matches found
CVE-2025-21348 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2025-21344 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2025-21344 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Description of the security update for SharePoint Server Subscription Edition: January 14, 2025 (KB5002676)
None None...
Description of the security update for SharePoint Server 2019: January 14, 2025 (KB5002666)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: January 14, 2025 (KB5002667)
None None...
Description of the security update for SharePoint Enterprise Server 2016: January 14, 2025 (KB5002672)
None None...
Description of the security update for SharePoint Enterprise Server 2016 Language Pack: January 14, 2025 (KB5002671)
None None...
PT-2025-4228 · Microsoft · Sharepoint Server
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue concerns a spoofing vulnerability in Microsoft SharePoint Server. This vulnerability is related to the failure to properly protect the web page structure, whic...
PT-2025-4223 · Microsoft · Sharepoint Server
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue allows remote attackers to execute arbitrary code, affecting the system. This can lead to significant security breaches, as attackers can run malicious code on...
Security Updates for Microsoft SharePoint Server 2019 (January 2025)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL 70300 C Tenable,...
Security Updates for Microsoft SharePoint Server 2016 (January 2025)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL 70300 C Tenable,...
Security Updates for Microsoft SharePoint Server Subscription Edition (January 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-21348, CVE-2025-21344 - Spoofing Vulnerability. CVE-2025-21393 %NASLMINLEVEL...
Vulnerability of Microsoft Office packages, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server: This vulnerability stems from operations that occur outside of the buffer in memory, allowing attackers to execute arbitrary code.
Packages such as Microsoft Office, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server are associated with operations that involve writing data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in errors in processing the relative path to the catalog, allowing an attacker to disclose protected information.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to errors in processing the relative path to the catalog. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the improper limitation of XML references to external objects, which allows attackers to gain unauthorized access to protected information.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow an attacker to gain unauthorized acces...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server’s software packages lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in their lack of access control mechanisms, which allows attackers to increase their privileges.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...