Microsoft SharePoint Server Elevation of Privilege Vulnerability

The Microsoft SharePoint Server 2016 installation on the   remote host is missing security updates. It is, therefore,   affected by multiple vulnerabilities:
  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2023-21716)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2023-21717)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2023-21716)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2023-21717)

The Microsoft SharePoint Foundation 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2023-21716)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2023-21717)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2023-21716)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2023-21717)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2023-21716)

  - An elevation of privilege vulnerability. An attacker can     exploit this to gain elevated privileges.
    (CVE-2023-21717)

ID	Name	Product	Family	Severity
171608	Security Updates for Microsoft SharePoint Server 2016 (Language Pack (February 2023))	Nessus	Windows : Microsoft Bulletins	critical
171607	Security Updates for Microsoft SharePoint Server 2019 (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171509	Security Updates for Microsoft SharePoint Server 2019 (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171508	Security Updates for Microsoft SharePoint Foundation 2013 (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171507	Security Updates for Microsoft SharePoint Server Subscription Edition (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171506	Security Updates for Microsoft SharePoint Server 2013 (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171505	Security Updates for Microsoft SharePoint Server 2016 (February 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-21717

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical