Microsoft SharePoint是美国微软(Microsoft)公司的一套企业业务协作平台。该平台用于对业务信息进行整合,并能够共享工作、与他人协同工作、组织项目和工作组、搜索人员和信息。 Microsoft SharePoint Server 存在安全漏洞。以下产品和版本受到影响:Microsoft SharePoint Enterprise Server 2016,Microsoft SharePoint Server 2019,Microsoft Business Productivity
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Microsoft Business Productivity Servers 2010 Service Pack 2 | 13.0.0.0< 14.0.7267.5000 |
affected |
| Microsoft | Microsoft SharePoint Enterprise Server 2016 | 16.0.0< 16.0.5134.1000 |
affected |
| Microsoft | Microsoft SharePoint Foundation 2013 Service Pack 1 | 15.0.0< 15.0.5327.1000 |
affected |
| Microsoft | Microsoft SharePoint Server 2019 | 16.0.0< 16.0.10372.20000 |
affected |
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Microsoft Business Productivity Servers 2010 Service Pack 2 | 13.0.0.0 ~ 14.0.7267.5000 | - |
|
| Microsoft | Microsoft SharePoint Enterprise Server 2016 | 16.0.0 ~ 16.0.5134.1000 | - |
|
| Microsoft | Microsoft SharePoint Foundation 2013 Service Pack 1 | 15.0.0 ~ 15.0.5327.1000 | - |
|
| Microsoft | Microsoft SharePoint Server 2019 | 16.0.0 ~ 16.0.10372.20000 | - |
|
| # | POC Description | Source Link | Shenlong Link |
|---|
No public POC found.
Login to generate AI POC| CVE-2021-26867 | 9.9 CRITICAL | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2021-26897 | 9.8 CRITICAL | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2021-26895 | 9.8 CRITICAL | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2021-26894 | 9.8 CRITICAL | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2021-26893 | 9.8 CRITICAL | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2021-26877 | 9.8 CRITICAL | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2021-27080 | 9.3 CRITICAL | Azure Sphere Unsigned Code Execution Vulnerability |
| CVE-2021-26865 | 8.8 HIGH | Windows Container Execution Agent Elevation of Privilege Vulnerability |
| CVE-2021-26411 | 8.8 HIGH | Internet Explorer Memory Corruption Vulnerability |
| CVE-2021-26876 | 8.8 HIGH | OpenType Font Parsing Remote Code Execution Vulnerability |
| CVE-2021-27085 | 8.8 HIGH | Internet Explorer Remote Code Execution Vulnerability |
| CVE-2021-26864 | 8.4 HIGH | Windows Virtual Registry Provider Elevation of Privilege Vulnerability |
| CVE-2021-26861 | 7.8 HIGH | Windows Graphics Component Remote Code Execution Vulnerability |
| CVE-2021-26898 | 7.8 HIGH | Windows Event Tracing Elevation of Privilege Vulnerability |
| CVE-2021-26872 | 7.8 HIGH | Windows Event Tracing Elevation of Privilege Vulnerability |
| CVE-2021-26887 | 7.8 HIGH | Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability |
| CVE-2021-26889 | 7.8 HIGH | Windows Update Stack Elevation of Privilege Vulnerability |
| CVE-2021-26890 | 7.8 HIGH | Application Virtualization Remote Code Execution Vulnerability |
| CVE-2021-26891 | 7.8 HIGH | Windows Container Execution Agent Elevation of Privilege Vulnerability |
| CVE-2021-26899 | 7.8 HIGH | Windows UPnP Device Host Elevation of Privilege Vulnerability |
Showing top 20 of 80 CVEs. View all on vendor page → →
No comments yet