Microsoft SharePoint Server 2019 build < 16.0.10399.20005 is vulnerable to an Elevation of Privilege. An attacker who successfully exploited this vulnerability could gain administrator privileges.

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:
  - A Sharepoint Server spoofing vulnerability. (CVE-2023-24950)   
  - A Sharepoint Server information disclosure vulnerability. (CVE-2023-24950)   
  - A Sharepoint Server remote code execution. (CVE-2023-24955)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:
  - A Sharepoint Server spoofing vulnerability. (CVE-2023-24950)   
  - A Sharepoint Server information disclosure vulnerability. (CVE-2023-24950)   
  - A Sharepoint Server remote code execution. (CVE-2023-24955)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:
  - A Sharepoint Server elevation of privilege vulnerabilty. (CVE-2023-29357, CVE-2023-33142)

  - A Sharepoint Server spoofing vulnerability. (CVE-2023-33130, CVE-2023-33132)   
  - A Sharepoint Server denial of service vulnerabilty. (CVE-2023-33129)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:
  - A Sharepoint Server spoofing vulnerability. (CVE-2023-24950)   
  - A Sharepoint Server information disclosure vulnerability. (CVE-2023-24950)   
  - A Sharepoint Server remote code execution. (CVE-2023-24955)

The Microsoft SharePoint Server running on the remote host is affected by an authentication bypass vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted message, to access protected resources.

Note that this plugin only tests the SharePoint site collections at / and /my.

ID	Name	Product	Family	Published	Updated	Severity
114099	Microsoft SharePoint Server 2019 build < 16.0.10399.20005 Elevation of Privilege	Web App Scanning	Component Vulnerability	10/30/2023	1/24/2024	critical
175370	Security Updates for Microsoft SharePoint Server 2019 (May 2023)	Nessus	Windows : Microsoft Bulletins	5/10/2023	6/6/2024	high
175368	Security Updates for Microsoft SharePoint Server Subscription Edition (May 2023)	Nessus	Windows : Microsoft Bulletins	5/10/2023	6/6/2024	high
177243	Security Updates for Microsoft SharePoint Server 2019 (June 2023)	Nessus	Windows : Microsoft Bulletins	6/13/2023	6/6/2024	critical
175369	Security Updates for Microsoft SharePoint Server 2016 (May 2023)	Nessus	Windows : Microsoft Bulletins	5/10/2023	6/6/2024	high
187058	Microsoft SharePoint Authentication Bypass (CVE-2023-29357)	Nessus	Windows	12/18/2023	11/12/2024	critical

Detections

Analytics

Plugins Search

critical

high

high

critical

high

critical