The Microsoft SharePoint Server or Project Server installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in     Microsoft Office due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     this, by convincing a user to visit a specially crafted     website or open a specially crafted document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0243)

  - A remote code execution vulnerability exists in     Microsoft Office due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     this, by convincing a user to visit a specially crafted     website or open a specially crafted document, to     execute arbitrary code in the context of the current     user. (CVE-2017-8501)

  - A cross-site scripting (XSS) vulnerability exists in     Microsoft SharePoint Server due improper validation of     user-supplied input in web requests. An authenticated,     remote attacker can exploit this, via a specially     crafted request, to execute arbitrary script code in a     user's browser session. (CVE-2017-8569)

Detections

Analytics

Security Update for Microsoft SharePoint Server and Project Server (July 2017)

high Nessus Plugin ID 101372

Version 1.13