The Microsoft SharePoint Server installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - Multiple remote code execution vulnerabilities exist in     Microsoft Office due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     these, by convincing a user to open a specially crafted     document, to execute arbitrary code in the context of     the current user. (CVE-2017-8509, CVE-2017-8511,     CVE-2017-8512)

  - A remote code execution vulnerability exists in     Microsoft PowerPoint due to improper handling of objects     in memory. An unauthenticated, remote attacker can     exploit this, by convincing a user to open a specially     crafted file, to execute arbitrary code in the context     of the current user. (CVE-2017-8513)

  - A reflective cross-site scripting (XSS) vulnerability     exists in Microsoft SharePoint Server due improper     validation of user-supplied input in web requests. An     unauthenticated, remote attacker can exploit this, via a     specially crafted request, to execute arbitrary script     code in a user's browser session. (CVE-2017-8514)

  - An elevation of privilege vulnerability exists when     Microsoft SharePoint Server does not properly sanitize     a specially crafted web request to an affected     SharePoint server. An authenticated attacker could     exploit the vulnerability by sending a specially crafted     request to an affected SharePoint server. (CVE-2017-8551)

Detections

Analytics

Security Update for Microsoft SharePoint Server (June 2017)

high Nessus Plugin ID 100787

Version 1.14

Version 1.13

Version 1.14 Apr 14, 2023, 8:00 PM Logic Changes (Updated from old coding standard to new) Plugin Feed: 202304142000
Version 1.13 Feb 17, 2023, 10:07 PM IAVM reference Plugin Feed: 202302172207