← back
CVE-2023-28288

Microsoft SharePoint Server Spoofing Vulnerability

CVSS 8.1 HIGHEPSS 6.2%CWE-918
Microsoft SharePoint Server Spoofing Vulnerability
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
Affected products
Microsoft · Microsoft SharePoint Enterprise Server 2013 Service Pack 1Microsoft · Microsoft SharePoint Enterprise Server 2016Microsoft · Microsoft SharePoint Foundation 2013 Service Pack 1Microsoft · Microsoft SharePoint Server 2019Microsoft · Microsoft SharePoint Server Subscription Edition
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/173126/Microsoft-SharePoint-Enterprise-Server-2016-Spoofing.htmlunverifiedexploitdbwww.exploit-db.com/exploits/51543unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/173126/Microsoft-SharePoint-Enterprise-Server-2016-Spoofing.htmlhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28288