Page 3 of 198 results (0.005 seconds)

CVSS: 8.0EPSS: 1%CPEs: 5EXPL: 0

15 Apr 2022 — Microsoft SharePoint Server Spoofing Vulnerability Una vulnerabilidad de suplantación de identidad de Microsoft SharePoint Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24472 •

CVSS: 8.8EPSS: 4%CPEs: 4EXPL: 0

09 Feb 2022 — Microsoft SharePoint Server Remote Code Execution Vulnerability Una Vulnerabilidad de Ejecución de Código Remota en Microsoft SharePoint Server This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of charts. Tampering with client-side data can trigger the deserialization of untrusted data. An attacker can leverage this vulnerabilit... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22005 • CWE-502: Deserialization of Untrusted Data •

CVSS: 8.0EPSS: 5%CPEs: 4EXPL: 0

09 Feb 2022 — Microsoft SharePoint Server Spoofing Vulnerability Una Vulnerabilidad de Suplantación de Identidad en Microsoft SharePoint Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21987 •

CVSS: 4.3EPSS: 1%CPEs: 4EXPL: 0

09 Feb 2022 — Microsoft SharePoint Server Security Feature Bypass Vulnerability Una Vulnerabilidad de Omisión de Funcionalidades de Seguridad de Microsoft SharePoint Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21968 •

CVSS: 9.0EPSS: 9%CPEs: 4EXPL: 0

11 Jan 2022 — Microsoft SharePoint Server Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Microsoft SharePoint Server • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21837 •

CVSS: 7.6EPSS: 0%CPEs: 4EXPL: 0

15 Dec 2021 — Microsoft SharePoint Server Spoofing Vulnerability Una vulnerabilidad de Suplantación de Identidad en Microsoft SharePoint Server. Este ID de CVE es diferente de CVE-2021-42320 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43242 •

CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0

15 Dec 2021 — Microsoft SharePoint Server Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota de Microsoft SharePoint Server. Este ID de CVE es diferente de CVE-2021-42294 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of server-side controls. An unsafe server-side control can be instantiated if it is specified as a... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42309 • CWE-94: Improper Control of Generation of Code ('Code Injection') CWE-732: Incorrect Permission Assignment for Critical Resource •

CVSS: 7.2EPSS: 0%CPEs: 6EXPL: 0

15 Dec 2021 — Microsoft SharePoint Server Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Microsoft SharePoint Server. Este ID de CVE es diferente de CVE-2021-42309 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42294 •

CVSS: 8.8EPSS: 6%CPEs: 3EXPL: 0

13 Oct 2021 — Microsoft SharePoint Server Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Microsoft SharePoint Server. Este ID de CVE es diferente de CVE-2021-40487 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of custom workflows. The issue results from the lack of proper validation of user-supplied data, w... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41344 •

CVSS: 8.8EPSS: 1%CPEs: 3EXPL: 0

13 Oct 2021 — Microsoft SharePoint Server Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota de Microsoft SharePoint Server. Este ID de CVE es diferente de CVE-2021-41344 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the Microsoft.SharePoint.WorkflowActions.SetVariableActivity class. A crafted SetVariableActivity element can r... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40487 • CWE-94: Improper Control of Generation of Code ('Code Injection') •