Security Updates for Microsoft SharePoint Server 2019 (November 2022)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-41060,...

Security Updates for Microsoft SharePoint Server 2013 (November 2022)

The Microsoft SharePoint Server 2013 installation installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information...

Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2022-87652)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft Corporation USA. Microsoft SharePoint Server is vulnerable to spoofing. An attacker could exploit the vulnerability with a specially crafted website to spoof content and trick users into believing that the site i...

Security Updates for Microsoft SharePoint Foundation 2013 (November 2022)

The Microsoft SharePoint Foundation 2013 installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 70300 C...

Security Updates for Microsoft SharePoint Server 2016 (November 2022)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-41060,...

CVE-2022-41122

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2022-41122

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2022-41062

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2022-41062

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2022-41122

Microsoft SharePoint Server Spoofing Vulnerability...

Spoofing

Microsoft SharePoint Server Spoofing Vulnerability...

Remote code execution

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2022-41062

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2022-41122 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2022-41122

CVE-2022-41122 is described in connected CNVD/NVD sources as a Microsoft SharePoint Server spoofing vulnerability. The CNVD entry notes that an attacker could exploit a specially crafted website to spoof content, tricking users into believing the site is legitimate. The available documents do not...

CVE-2022-41062

CVE-2022-41062 is a Microsoft SharePoint Server remote code execution vulnerability. Public details shown in connected docs indicate it affects multiple SharePoint products (Foundation 2013, Server 2016/2019, Subscription Edition) and is exploitable via remote attack with high impact (CVSS 3.1: 8...

CVE-2022-41122 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2022-41062 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Patch Tuesday - November 2022

It’s a relatively light Patch Tuesday this month by the numbers – Microsoft has only published 67 new CVEs, most of which affect their flagship Windows operating system. However, four of these are zero-days, having been observed as exploited in the wild. The big news is that two older zero-day CV...

Description of the security update for SharePoint Foundation 2013: September 13, 2022 (KB5002267)

Description of the security update for SharePoint Foundation 2013: September 13, 2022 KB5002267 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint remote code execution vulnerability. To learn more about the...