Microsoft SharePoint Server Information Disclosure Vulnerability

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:
  - A Sharepoint Server spoofing vulnerability. (CVE-2023-24950)   
  - A Sharepoint Server information disclosure vulnerability. (CVE-2023-24950)   
  - A Sharepoint Server remote code execution. (CVE-2023-24955)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:
  - A Sharepoint Server spoofing vulnerability. (CVE-2023-24950)   
  - A Sharepoint Server information disclosure vulnerability. (CVE-2023-24950)   
  - A Sharepoint Server remote code execution. (CVE-2023-24955)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:
  - A Sharepoint Server spoofing vulnerability. (CVE-2023-24950)   
  - A Sharepoint Server information disclosure vulnerability. (CVE-2023-24950)   
  - A Sharepoint Server remote code execution. (CVE-2023-24955)

ID	Name	Product	Family	Severity
175370	Security Updates for Microsoft SharePoint Server 2019 (May 2023)	Nessus	Windows : Microsoft Bulletins	medium
175369	Security Updates for Microsoft SharePoint Server 2016 (May 2023)	Nessus	Windows : Microsoft Bulletins	medium
175368	Security Updates for Microsoft SharePoint Server Subscription Edition (May 2023)	Nessus	Windows : Microsoft Bulletins	medium

Detections

Analytics

CVE-2023-24954

medium

Tenable Plugins

medium

medium

medium