Spoofing

Microsoft SharePoint Server Spoofing Vulnerability...

Remote code execution

Microsoft SharePoint Remote Code Execution Vulnerability...

Remote code execution

Microsoft SharePoint Remote Code Execution Vulnerability...

Microsoft SharePoint Information Disclosure Vulnerability (CNVD-2021-48903)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2021-45279)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. Microsoft SharePoint...

Security Updates for Microsoft SharePoint Server 2010 (December 2020)

The Microsoft SharePoint Server 2010 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17089 - An information disclosur...

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2020-73768)

SharePoint is a web-based collaboration platform that integrates with Microsoft Office.SharePoint Server is one of the versions of SharePoint that is installed on a customer's IT infrastructure and is designed to give an organization greater control over the behavior or design of...

Security Updates for Microsoft SharePoint Server 2013 (December 2020)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17089 - A remote code execution...

Security Updates for Microsoft SharePoint Server 2019 (December 2020)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17089 - A remote code execution...

Security Updates for Microsoft SharePoint Server 2016 (December 2020)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17089 - A remote code execution...

CVE-2020-17120

The CVE-2020-17120 entry corresponds to a Microsoft SharePoint Information Disclosure Vulnerability. Connected sources confirm it is part of multiple SharePoint Server vulnerabilities across several versions (2010, 2013, 2016, 2019) and is listed among updates released in December 2020. The vulne...

CVE-2020-17121 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-17121

No concrete technical details for CVE-2020-17121 are present in the provided connected documents; they only reference it among December 2020 SharePoint updates without specifics on affected components or root cause.

CVE-2020-17120 Microsoft SharePoint Information Disclosure Vulnerability

...

CVE-2020-17118 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2020-17118

CVE-2020-17118 is a remote code execution vulnerability in Microsoft SharePoint Server. The connected documents confirm it affects multiple SharePoint Server versions (2010, 2013, 2016, 2019) and that systems missing security updates are affected. No explicit root-cause details are provided in th...

CVE-2020-17115

CVE-2020-17115 is described across connected sources as a session spoofing vulnerability in Microsoft SharePoint Server. The provided Nessus plugin entries group this CVE with other SharePoint CVEs and indicate vulnerable state when updates are missing (e.g., December 2020 security updates). Conc...

CVE-2020-17115 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2020-17089 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2020-17089

CVE-2020-17089 is a Microsoft SharePoint elevation-of-privilege vulnerability reported across multiple advisories. Connected sources confirm the issue affects SharePoint Server instances and is associated with related CVEs (e.g., CVE-2020-17115, CVE-2020-17118, CVE-2020-17120, CVE-2020-17121, CVE...